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Abstract 



Control and bribery are settings in which an external agent seeks to influence the outcome of an election. Con- 
structive control of elections refers to attempts by an agent to, via such actions as addition/deletion/partition 
of candidates or voters, ensure that a given candidate wins IIBTT92I . Destructive control refers to attempts 
by an agent to, via the same actions, preclude a given candidate's victory [HHROTaJ. An election system in 
which an agent can sometimes affect the result and it can be determined in polynomial time on which inputs 
the agent can succeed is said to be vulnerable to the given type of control. An election system in which an 
agent can sometimes affect the result, yet in which it is NP-hard to recognize the inputs on which the agent 
can succeed, is said to be resistant to the given type of control. 

Aside from election systems with an NP-hard winner problem, the only systems previously known to 
be resistant to all the standard control types were highly artificial election systems created by hybridiza- 
tion OHHROTbl . This paper studies a parameterized version of Copeland voting, denoted by Copeland", 
where the parameter a is a rational number between and 1 that specifies how ties are valued in the pairwise 
comparisons of candidates. In every previously studied constructive or destructive control scenario, we deter- 
mine which of resistance or vulnerability holds for Copeland" for each rational a, < a < 1. In particular, 
we prove that Copeland"^, the system commonly referred to as "Copeland voting," provides full resistance 
to constructive control, and we prove the same for Copeland", for all rational a, Q < a < I. Among systems 
with a polynomial-time winner problem, Copeland voting is the first natural election system proven to have 
full resistance to constructive control. In addition, we prove that both Copeland'^ and Copeland' (interest- 
ingly, Copeland' is an election system developed by the thirteenth-century mystic Ramon LluU) are resistant 
to all standard types of constructive control other than one variant of addition of candidates. Moreover, we 
show that for each rational a, < a < I, Copeland" voting is fully resistant to bribery attacks, and we 
establish fixed-parameter tractability of bounded-case control for Copeland". 

We also study Copeland" elections under more flexible models such as microbribery and extended con- 
trol, we integrate the potential irrationality of voter preferences into many of our results, and we prove our 
results in both the unique-winner model and the nonunique-winner model. Our vulnerability results for 
microbribery are proven via a novel technique involving min-cost network flow. 
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1 Introduction 



1.1 Some Historical Remarks: Llull's and Copeland's Election Systems 

Elections have played an important role in human societies for thousands of years. For example, elections 
were of central importance in the democracy of ancient Athens. There citizens typically could only agree 
(vote yes) or disagree (vote no) with the speaker, and simple majority-rule was in effect. The mathematical 
study of elections, give or take a few discussions by the ancient Greeks and Romans, was until recently 
thought to have been initiated only a few hundred years ago, namely in the breakthrough work of Borda and 
Condorcet — later in part reinvented by Dodgson (see, e.g., IIMU95I for reprints of these classic papers). One 
of the most interesting results of this early work is Condorcet's observation ||Con85l that if one conducts 
elections with more than two alternatives then even if all voters have rational (i.e., transitive) preferences, the 
society in aggregate can be irrational (indeed, can have cycles of strict preference). Nonetheless, Condorcet 
believed that if there exists a candidate c such that c defeats each other candidate in head-to-head contests 
then c should win the election (see, e.g., IIMU95I p. 114]). Such a candidate is called a Condorcet winner 
Clearly, there can be at most one Condorcet winner in any election, and there might be none. 

This understanding of history has been reconsidered during the past few decades, as it has been discov- 
ered that the study of elections was considered deeply as early as the thirteenth century (see Hagele and 
Pukelsheim BHPOll and the citations therein regarding Ramon Llull and the fifteenth-century figure Cusanus, 
especially the citations that in QHPOll are numbered 3, 5, and 24-27). Ramon Llull (b. 1232, d. 1315), a 
Catalan mystic, missionary, and philosopher developed an election system that (a) has an efficient winner- 
determination procedure and (b) elects a Condorcet winner whenever one exists and otherwise elects candi- 
dates that are, in a certain sense, closest to being Condorcet winners. 

Llull's motivation for developing an election system was to obtain a method of choosing abbesses, abbots, 
bishops, and perhaps even the pope. His election ideas never gained public acceptance in medieval Europe 
and were long forgotten. 

It is interesting to note that Llull allowed voters to have so-called irrational preferences. Given three 
candidates, c, d, and e, it was perfectly acceptable for a voter to prefer c to d,d to e, and e to c. On the other 
hand, in modern studies of voting and election systems each voter's preferences are most typically modeled 
as a linear order over all candidates. (In this paper, as is common when discussing elections, "linear order" 
implies strictness, i.e., no tie in the ordering; that is, by "linear order" we mean a strict, complete order, i.e., 
an irreflexive, antisymmetric, complete, transitive relation.) Yet allowing irrationality is very tempting and 
natural. Consider Bob, who likes to eat out but is often in a hurry. Bob prefers diners to fast food because 
he is willing to wait a little longer to get better food. Also, given a choice between a fancy restaurant and a 
diner he prefers the fancy restaurant, again because he is willing to wait somewhat longer to get better quality. 
However, given the choice between a fast-food place and a fancy restaurant Bob might reason that he is not 
willing to wait so much longer to be served at the fancy restaurant and so will choose fast food instead. Thus 
regarding catering options, Bob's preferences are irrational in our sense, i.e., intransitive. When voters make 
their choices based on multiple criteria — a very common and natural occurrence both among humans and 
software agents — such irrationalities can occur 



Llull's election system is remarkably similar to what is now known as "Copeland elections" |Cop51 1, a 
more than half-century old voting procedure that is based on pairwise comparisons of candidates: The winner 
(by a majority of votes — in this paper "majority" always, as is standard, means strict majority) of each such 
head-to-head contest is awarded one point and the loser is awarded zero points; in ties, both parties are (in 
the most common interpretation of Copeland's meaning) awarded half a point; whoever collects the most 
points over all these contests (including tie-related points) is the election's winner In fact, the point value 
awarded for ties in such head-to-head majority-rule contests is treated in two ways in the literature when 
speaking of Copeland elections: half a point (most common) and zero points (less common). To provide 
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a framework that can capture both those notions, as well as capturing Llull's system and the whole family 
of systems created by choices of how we value ties, we propose and introduce a parameterized version of 
Copeland elections, denoted by Copeland", where the parameter a is a rational number, < a < 1, and 
in the case of a tie both candidates receive a points. So the system widely referred to in the literature 
as "Copeland elections" is Copeland"-^, where tied candidates receive half a point each (see, e.g.. Merlin 
and Saari ISM96, MS97jl : the definition used by Conitzer et al. iCSL07l can be scaled to be equivalent to 
Copeland"-^). Copeland", where tied candidates come away empty-handed, has sometimes also been referred 
to as "Copeland elections" (see, e.g., Procaccia, Rosenschein, and Kaminka IIPRK07I and an early version 
of this paper llFH HROTI). The above-mentioned election system proposed by Ramon Llull in the thirteenth 
century is in this notation Copeland', where tied candidates are awarded one point each, just like winners of 
head-to-head contests^ The group stage of the FIFA World Cup finals is in essence a collection of Copeland^ 
tournaments. 

At first glance, one might be tempted to think that the definitional perturbation due to the parameter a 
in Copeland" elections is negligible. However, it in fact can make the dynamics of Llull's system quite 
different from those of, for instance, Copeland"^ or Copeland". Specific examples witnessing this claim, 
both regarding complexity results and regarding their proofs, are given at the end of Section [T3] 

Finally, we mention that a probabilistic variant of Copeland voting (known as the Jech method) was 
defined already in 1929 by Zermelo ||Zer29l and later on was reintroduced by several other researches (see, 
e.g., the paper of Levin and Nalebuff IILN95I for further references and a description of the Jech method). 
We note in passing that the Jech method is applicable even when it is fed incomplete information. In the 
present paper, however, we do not consider incomplete-information or probabilistic scenarios, although we 
commend such settings as interesting for future work. 

1.2 Computational Social Choice 

In general it is impossible to design a perfect election system. In the 1950s Arrow IIArr63l famously showed 
that there is no social choice system that satisfies a certain small set of arguably reasonable requirements, 
and later Gibbard IIGib73L Satterthwaite IISat75L and Duggan and Schwartz IDSOOI showed that any natural 
election system can sometimes be manipulated by strategic voting, i.e., by a voter revealing different pref- 
erences than his or her true ones in order to affect an election's result in his or her favor. Also, no natural 
election system with a polynomial-time winner-determination procedure has yet been shown to be resistant 
to all types of control via procedural changes. Control refers to attempts by an external agent (called "the 
chair") to, via such actions as addition/deletion/partition of candidates or voters, make a given candidate win 
the election (in the case of constructive control IIBTT92I ) or preclude a given candidate's victory (in the case 
of destructive control IIHHR07al ). 

These obstacles are very discouraging, but the field of computational social choice theory grew in 
part from the realization that computational complexity provides a potential shield against manipula- 
tion/control/etc. In particular, around 1990, Bartholdi, Tovey, and Trick ||BTT89a||BTT92| and Bartholdi 
and Orlin liB09 1 1 brilliantly observed that while we perhaps might not be able to make manipulation (i.e., 
strategic voting) and control of elections impossible, we could at least try to make such manipulation and 
control so computationally difficult that neither voters nor election organizers will attempt it. For example, if 

' Page 23 of Hagele and Pukelsheim IHPOll indicates in a way we find deeply convincing (namely by a direct quote of Llull's in- 
this-case-very-clear words from his Artifitium Electionis Personanim — which was rediscovered by those authors in the year 2000) that 
at least one of Llull's election systems was Copeland' , and so in this paper we refer to the both-candidates-score-a-point-on-a-tie variant 
as Llull voting. 

In some settings Llull required the candidate and voter sets to be identical and had an elaborate two-stage tie-breaking rule ending in 
randomization. We disregard these issues here and cast his system into the modem idiom for election systems. (However, we note in 
passing that there do exist some modern papers in which the voter and candidate sets are taken to be identical, see for example the work 
of and references in |AT07| .) 
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there is a way for a committee's chair to set up an election within the committee in such a way that his or her 
favorite option is guaranteed to win, but the chair's computational task would take a million years, then for 
all practical purposes we may feel that the chair is prevented from finding such a set-up. 

Since the seminal work of Bartholdi, Orlin, Tovey, and Trick, a large body of research has been ded- 
icated to the study of computational properties of election systems. Some topics that have received much 
attention are the complexity of manipulating elections | CS03 , CS06 CSL07 EL05 HH07 PR0 7 PRZO? ] and 
of controlUng elections via procedural changes IIHHR07allHHR07bllPRZ07IIENR08bll . Recently, Faliszewski, 
Hemaspaandra, and Hemaspaandra introduced the study of the complexity of bribery in elections f llFHH06all . 
see also IFalOSI ). Bribery shares some features of manipulation and some features of control. In particular, 
the briber picks the voters he or she wants to affect (as in voter control problems) and asks them to vote as he 
or she wishes (as in manipulation). (For additional citations and pointers, see the recent survey IFHHRI .) 

In this paper we study Copeland" elections with respect to the computational complexity of bribery and 
procedural control; see IIFHS08I for a study of manipulation within Copeland". 

The study of election systems and their computational properties, such as the complexity of their ma- 
nipulation, control, and bribery problems, is an important topic in multiagent systems. Agents/voters may 
have different, often conflicting, individual preferences over the given alternatives (or candidates) and voting 
rules (or, synonymously, election systems) provide a useful method for agents to come to a "reasonable" 
decision on which alternative to choose. Thus elections can be employed in multiagent settings and also in 
other contexts to solve many practical problems. As just a few examples we mention the work of Ephrati 
and Rosenschein IIER97I where elections are used for planning, the work of Ghosh et al. IIGMHS99 1 who de- 
veloped a recommender system for movies that is based on voting, and the work of Dwork et al. [DKNSOl] 
where elections are used to aggregate results from multiple web-search engines. In a multiagent setting we 
may have hundreds of elections happening every minute and we cannot hope to carefully check in each case 
whether the party that organized the election attempted some procedural change to skew the results. However, 
if it is computationally hard to find such procedural changes then we can hope it is practically infeasible for 
the organizers to undertake them. 

A standard technique for showing that a particular election-related problem (for example, the problem of 
deciding whether the chair can make his or her favorite candidate a winner by influencing at most k voters not 
to cast their votes) is computationally intractable is to show that it is NP-hard. This approach is taken in almost 
all the papers on computational social choice cited above, and it is the approach that we take in this paper 
One of the justifications for using NP-hardness as a barrier against manipulation and control of elections 
is that in multiagent settings any attempts to influence the election's outcome are made by computationally 
bounded software agents that have neither human intuition nor the computational ability to solve NP-hard 
problems. 

Recently, such papers as IICS06IIPR07IIHHIIMPS08I have studied the frequency (or sometimes, probabil- 
ity weight) of correctness of heuristics for voting problems. Although this is a fascinating and important 
direction, it does not at this point remove the need to study worst-case hardness. Indeed, we view worst- 
case study as a natural prerequisite to a frequency-of-hardness attack: After all, there is no point in seeking 
frequency-of-hardness results if the problem at hand is in P to begin with. And if one cannot even prove 
worst-case hardness for a problem, then proving "average-case" hardness is even more beyond reach. Also, 
current frequency results have debilitating limitations (for example, being locked into specific distributions; 
depending on unproven assumptions; and adopting "tractability" notions that declare undecidable problems 
tractable and that are not robust under even linear-time reductions). These models are arguably not ready for 
prime time and, contrary to some people's impression, fail to imply average-case polynomial runtime claims. 
IIEHRS07IIHHI provide discussions of some of these issues. 
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1.3 Outline of Our Results 



The goal of this paper is to study Copeland" elections from the point of view of computational social choice 
theory, in the setting where voters are rational and in the setting where voters are allowed to have irrational 
preferences. (Note: When we henceforward say "irrational voters," we mean that the voters may have irra- 
tional preferences, not that they each must.) We study the issues of bribery and control and we point the reader 
to the work of Faliszewski, Hemaspaandra, and Schnoor IIFHS08I for work on manipulation. (Very briefly 
summarized, the work of Fahszewski, Hemaspaandra, and Schnoor IIFHS08I on manipulation of Copeland" 
elections shows that for all rational a,0<a<l,a^|,the coalitional manipulation problem in unweighted 
Copeland" elections, even for coalitions of just two manipulators, is NP-complete. Some of the constructions 
of the present paper have been adopted or adapted in that paper in order to prove results about manipulation.) 

Bribery and control problems have some very natural real-life interpretations. For example, during pres- 
idential elections a candidate might want to encourage as many of his or her supporters as possible to vote 
("get-out-the-vote" efforts): control via addition of voters; elections can be held at an inconvenient date for a 
group of voters (e.g., a holiday) or at a hard-to-reach location (e.g., requiring one to own a car, or such that 
getting to the location involves passing dangerous areas): control via deleting voters; one can choose voting 
districts in a way favorable to a particular candidate or party (gerrymandering): control via partitioning vot- 
ers; one can introduce a new candidate to the election in the hope that he or she will steal votes away from 
the opponents of one's favorite candidate without affecting the favorite candidate's performance: control via 
adding candidates. All the other control scenarios that we study also have natural interpretations. 

Similarly, bribery is a natural and important issue in the context of elections. We stress, however, that 
bribery problems do not necessarily need to correspond to cheating or any sort of illegal action. One could 
view bribery problems as, for example, problems of finding the minimum number of voters who can switch 
the result of the election and, thus, as problems of finding coalitions, especially if one assigns prices to 
voters to measure the difficulty of convincing a particular voter to join the coalition (see, e.g., the paper of 
Faliszewski |Fal08 1 for an example of a bribery problem where such an interpretation is very natural). 

It is quite natural to study control and bribery both in constructive settings (where we want to make our 
favorite candidate a winner) and in destructive settings (where we try to prevent a candidate from winning). 
In the context of real-life elections, one often hears voters speaking of which candidate they hope will win, 
but one also often hears voters expressing the sentiment "Anyone but him." The constructive and destructive 
settings correspond to actions that agents belonging to these groups might be interested in. 

One of the main achievements of this paper is to classify which of resistance or vulnerability holds for 
Copeland" in every previously studied control scenario for each rational value of a, < a < 1. In doing 
so, we provide an example of a control problem where the complexity of Copeland"-^ (which is the system 
commonly referred to as "Copeland") differs from that of both Copeland" and Copeland^ : While the latter two 
problems are vulnerable to constructive control by adding (an unlimited number of) candidates, Copeland"'^ 
is resistant to this control type (see Section|2]for definitions and Theorem l4. lOl for this result). 

In fact, Copeland (i.e., Copeland"-^) is the first natural election system (with a polynomial-time winner 
problem) proven to be resistant to every type of constructive control that has been proposed in the literature 
to date. This result closes a 15-year quest for a natural election system fully resistant to constructive control. 

We also show that Copeland" is resistant to both constructive and destructive bribery, for both the case 
of rational voters and the case of irrational voters. Our hardness proofs work for the case of unweighted 
voters without price tags (see IIFHH06al ) and thus, naturally, apply as well to the more involved scenarios of 
weighted unpriced voters, unweighted priced voters, and weighted priced voters. 

To prove our bribery results, we introduce a method of controlling the relative performances of certain 
voters in such a way that, if one sets up other restrictions appropriately, the legal possibilities for bribery 
actions are sharply constrained. We call our approach "the UV technique," since it is based on dummy 
candidates u and v. The proofs of Theorems 13 . 21 and 13 .41 are particular apphcations of this method. We feel 
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that the UV technique will be useful, even beyond the scope of this paper, for the analysis of bribery in other 
election systems based on head-to-head contests. 

We also study Copeland" elections under more flexible models such as "microbribery" (see Section [J!2] | 
and "extended control" (see Section 1431 ). We show that Copeland" (with irrational voters allowed) is vul- 
nerable to destructive microbribery and to destructive candidate control via providing fairly simple greedy 
algorithms. In contrast, our polynomial-time algorithms for constructive microbribery are proven via a tech- 
nique involving min-cost network flows. To the best of our knowledge, this is the first application of min-cost 
flows to election problems. We believe that the range of applicability of flow networks to election problems 
extends well beyond microbribery for Copeland" elections and we point the reader to a recent, independent 
paper by Procaccia, Rosenschein, and Zohar IIPRZOSrI and to a paper by Faliszewski IIFalOSI for examples of 
such applications. 

We also mention that during our study of Copeland control we noticed that the proof of an important 
result of Bartholdi, Tovey, and Trick IIBTT921 Theorem 12] (namely, that Condorcet voting is resistant to 
constructive control by deleting voters) is invalid. The invalidity is due to the proof centrally using nonstrict 
voters, in violation of Bartholdi, Tovey, and Trick's iBTT92:| (and our) model, and the invalidity seems 
potentially daunting or impossible to fix with the proof approach taken there. We note also that Theorem 14 of 
the same paper has a similar flaw. In Section|5]we validly reprove their claimed results using our techniques. 

As mentioned in Section fTTl Copeland" elections may behave quite differently depending on the value of 
the tie-rewarding parameter a. We now give concrete examples to make this case. Specifically, proofs of re- 
sults for Copeland" occasionally differ considerably for distinct values of a, and in some cases even the com- 
putational complexity of various control and manipulation problems (for the manipulation case see |FHS081) 
may jump between P membership and NP-completeness depending on a. Regarding control, we have already 
noted that Theorem |4. 1 Ol shows that some control problem (namely, control by adding an unlimited number of 
candidates) for Copeland" is NP-complete for each rational a with < a < 1, yet Theorem |4. 1 11 shows that 
same control problem to be in P for a G {0, 1 }. To give another example involving a different control prob- 
lem, namely control by partition of candidates with the ties-eliminate tie-handling rule (see Section |2]i, we 
note that the proofs of Theorem l4.20l ( which applies to a = 1 for this control problem within Copeland") and 
of Theorem 14. 2 II (which applies to all rational a with < a < 1 for the same problem) differ substantially. 
Regarding constructive microbribery, the vulnerability constructions for a — Q (see Lemma l3.13l ) and a = 1 
(see Lemma [3. 16b significantly differ from each other, and neither of them works for tie-rewarding values 
other than and 1 . The above remarks notwithstanding, for most of our results we show that it is possible 
to obtain a unified — though due to this uniformity sometimes rather involved — construction that works for 
Copeland" for every rational a, < a < 1. 



1.4 Organization 

This paper is organized as follows. In Section [H we formalize the notion of elections and in particular 
of Copeland" elections, we introduce some useful notation, and we formally define the control and bribery 
problems we are interested in. In Section[3] we show that for each rational a, < a < 1, Copeland" elections 
are fully resistant to bribery, both in the case of rational voters and in the case of irrational voters. On the other 
hand, if one changes the bribery model to allow "microbribes" of voters (a fine-grained approach to bribery, 
in which the more one changes a voter's vote, the more one has to pay the voter), we prove vulnerability for 
each rational a, < a < 1, in the irrational- voters destructive case and for some specific values of a in the 
irrational-voters constructive case. In Sections [4.11 and l4~2l we present our results on procedural control for 
Copeland" elections for each rational a with < a < 1 . We will see that very broad resistance holds for the 
constructive-control cases. Section [43] presents our results on fixed-parameter tractability of bounded-case 

^Procaccia, Rosenschein, and Zohar IPRZ08I independently of our work in IFHHR071 used a similar technique in their work regard- 
ing the complexity of achieving proportional representation. 
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control for Copeland". Section|5]provides valid proofs for several control problems for Condorcet elections 
(studied by Bartholdi, Tovey, and Trick IIBTT92I ) whose original proofs were invalid due to being at odds 
with the model of elections used in IIBTT92I . We conclude the paper with a brief summary in Section |6] and 
by stating some open problems. 



2 Preliminaries 



2.1 Elections: The Systems of LluU and Copeland 

An election E ^ {C,V) consists of a finite candidate set C = {ci, . . . ,c„,} and a finite collection V of voters, 
where each voter is represented (individually, except later when we discuss succinct inputs) via his or her 
preferences over the candidates. An election system (or an election rule) is a rule that determines the winner(s) 
of each given election, i.e., a mapping from pairs (C, V) to subsets of C. 

We consider two ways in which voters can express their preferences. In the rational case (our default 
case), each voter's preferences are represented as a linear order over the set cj3 i.e., each voter v, has a 
preference list c;, > c,., > • • • > c;,„, with {/i,/2, . • • ,im} ~ {1,2, .. . ,m}. In the irrational case, each voter's 
preferences are represented as a preference table that for every unordered pair of distinct candidates c, and cj 
in C indicates whether the voter prefers c, to Cj (i.e., c,- > cj) or prefers cj to c, (i.e., cj > cf). 

Some well-known election rules for the case of rational voters are plurality, Borda count, and Condorcet. 
Plurality elects the candidate(s) that are ranked first by the largest number of voters. Borda count elects the 
candidate(s) that receive the most points, where each voter v,- gives each candidate Cj as many points as the 
number of candidates cj is preferred to with respect to v, 's preferences. A candidate c, is a Condorcet winner 
if for every other candidate Cj it holds that c, is preferred to Cj by a majority of voters. Note that each election 
instance will have at most one Condorcet winner. 

In this paper, we introduce a parameterized version of Copeland's election system | Cop51| , which we 



denote by Copeland", where the parameter a is a rational number between and 1 that specifies how ties are 
rewarded in the head-to-head majority-rule contests between any two distinct candidates. 

Definition 2.1 Let a, < a < I, be a rational number In a Copeland" election, for each head-to-head 
contest between two distinct candidates, if some candidate is preferred by a majority of voters then he or 
she obtains one point and the other candidate obtains zero points, and if a tie occurs then both candidates 
obtain a points. Let E = {C,V) be an election. For each c & C, score"{c) is (by definition) the sum of 
c's Copeland" points in E. Every candidate c with maximum score^{c) (i.e., every candidate c satisfying 
{\/d G C)[score"{c) > score"{d)]) wins. 

Let Copeland".j.^jjjjj^g( denote the same election system but with voters allowed to be irrational. 

As mentioned earlier, in the literature the term "Copeland elections" is most often used for the system 
Copeland"-^ (e.g., llSM96..MS97l and a rescaled version of liCSL07l ). but has occasionally been used for 
Copeland" (e.g., IIPRK07I and an early version of this paper IIFHHR07II ). As mentioned earlier, the system 
Copeland' was proposed by Llull in the thirteenth century (see the literature pointers given in the introduction) 
and so is called Llull voting. 

We now define some notation to help in the discussion of Copeland" elections. Informally put, if E = 
(C,y) is an election and if c,- and cj are any two candidates in C then by vs£(c,,c/) we mean the surplus of 
votes that candidate c, has over cj. Formally, we define this notion as follows. 

Definition 2.2 Let E = iC,V) be an election and let Ci and cj be two arbitrary candidates from C. Define 



^\y\ this paper, we take "linear order" to mean a strict total order. This is a common convention within voting theory, see, e.g., the 
book of Austen-Smith and Banks lABOOl . However, we mention that in the field of mathematics the term "linear order" is typically 
taken to allow nonstrictness, i.e., to allow ties. 
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the relative vote-score of c, with respect to cj by 



'^SE[Ci,Cj) < ijjygy I y prefers Ci to Cj}\\ — \\{v £V \ v prefers cj to Ci}\\ otherwise. 

So, if c; defeats cj in a head-to-head contest in E then vs£(c,-,cy) > 0, if they are tied then vs£(c;,Cj) = 0, 
and if cj defeats c; then vs£(c,,cy) < 0. (Throughout this paper, "defeats" excludes the possibility of a tie, 
i.e., "defeats" means "(strictly) defeats." We will say "ties-or-defeats" when we wish to allow a tie to suffice.) 
Clearly, vs£(c/,cy) = — vs£(c;,c,). We often speak, in the plural, of relative vote-scores when we mean a 
group of results of head-to-head contests between particular candidates. 

Let a, < a < 1, be a rational number. Definition 12. 1 1 introduced score'^{c), the Copeland" score of 
candidate c in election E. Note that for each candidate ct S C, 

score"{ci) — \\{cj eC \ Ci =/= cj and vs£(c;,cy) > 0}|| 

+ a\\{cj eC \ Ci^ Cj and vs£(c;,c^') = 0}||. 

In particular, we have 5core£(c,) = ||{cj e C | Cj ^ cj and vsE{ci,Cj) > 0}\\,andscore^^{ci) = \\{cj EC \ Cj 
Cj and vs£(c,,cy) > 0}||. Note further that the highest possible Copeland" score in any election E = {C,V) 
is llCll-1. 

Recall that a candidate c, G C is a Copeland" winner of E — {C,V) if for all cj G C it holds that 
score"{ci) > score'^{cj). (Clearly, some elections can have more than one Copeland" winner) A candidate 
c, is a Condorcet winner of E if score^{ci) = ||C|| — 1, that is, if c, defeats all other candidates in head-to-head 
contests. 

In many of our constructions to be presented in the upcoming proofs, we use the following notation for 
rational voters. 

Notation 2.3 Within every election we fix some arbitrary order over the candidates. Any occurrence of a 
subset D of candidates in a preference list means the candidates from D are listed with respect to that fixed 
order Occurrences of D mean the same except that the candidates from D are listed in the reverse order 

For example, if C = {a,b,c,d,e}, with the alphabetical order being used, and D = {a,c,e} then b > D > d 
means b>a>c>e>d, and b > D > d means b>e>c>a>d. 



2.2 Bribery and Control Problems 

We now describe the computational problems that we study in this paper. Our problems come in two flavors: 
constructive and destructive. In the constructive version the goal is to determine whether, via the bribery 
or control action type under study, it is possible to make a given candidate a winner of the election. In the 
destructive case the goal is to determine whether it is possible to prevent a given candidate from being a 
winner of the election. 

Let S" be an election system. In our case, will be either Copeland" or CopelandjJj.^jjQ|^^[, where a, < 
a < 1 , is a rational number The bribery problem for with rational voters is defined as follows IIFHH06al . 

Name: (f-bribery and (^-destructive-bribery. 

Given: A set C of candidates, a collection V of voters specified via their preference lists over C, a distin- 
guished candidate p EC, and a nonnegative integer k. 

Question (constructive): Is it possible to make p a winner of the (o election resulting from {C,V) by modi- 
fying the preference lists of at most k voters? 
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Question (destructive): Is it possible to ensure that p is not a winner of the S' election resulting from {C,V) 
by modifying the preference lists of at most k voters? 

The version of this problem for elections with irrational voters allowed is defined exactly like the rational 
one, with the only difference being that voters are represented via preference tables rather than preference 
Usts, and the briber may completely change a voter's preference table at unit cost. At the end of the present 
section. Section 12.21 we will describe the variants based on seeking to make p be (or to preclude p from 
being) a unique winner. Later in the paper we will study another variant of bribery problems — a variant in 
which one is allowed to perform microbribes: bribes for which the cost depends on each preference-table 
entry change, and the briber pays separately for each such change. 

Bribery problems seek to change the outcome of elections via modifying the reported preferences of 
some of the voters. In contrast, control problems seek to change the outcome of an election by modifying 
the election's structure via adding/deleting/partitioning either candidates or voters. When formally defining 
these control types, we use the following naming conventions for the corresponding control problems. The 
name of a control problem starts with the election system used (when clear from context, it may be omitted), 
followed by CC for "constructive control" or by DC for "destructive control," followed by the acronym 
of the type of control: AC for "adding (a limited number of) candidates," ACu for "adding (an unlimited 
number of) candidates," DC for "deleting candidates," PC for "partition of candidates," RPC for "run-off 
partition of candidates," AV for "adding voters," DV for "deleting voters," and PV for "partition of voters." 
All the partitioning cases (PC, RPC, and PV) are two-stage elections, and we here use both tie-handling 
rules of Hemaspaandra, Hemaspaandra, and Rothe ||HHR07a| for first-stage subelections in these two-stage 
elections. In particular, for all the partitioning cases, the acronym PC, RPC, and PV, respectively, is followed 
by the acronym of the tie-handling rule used in first-stage subelections, namely TP for "ties promote" (i.e., all 
winners of first-stage subelections are promoted to the final round of the election) and TE for "ties eliminate" 
(i.e., only unique winners of first-stage subelections are promoted to the final round of the election, so if 
there is more than one winner in a given first-stage subelection or there is no winner in a given first-stage 
subelection then that subelection does not move any of its candidates forward). 

We now formally define our control problems. These definitions are due to Bartholdi, Tovey, and 
Trick IIBTT92I for constructive control and to Hemaspaandra, Hemaspaandra, and Rothe IHHROTal for de- 
structive control. 

Let be an election system. Again, S" will here be either Copeland" or CopelandjJj.^jjjj|^^[, where a, 
< a < 1, is a rational number. We describe our control problems as if they were for the case of rational 
preferences, but the irrational cases are perfectly analogous, except for replacing preference lists with prefer- 
ence tables. 

Control via Adding Candidates 

We start with two versions of control via adding candidates. In the unlimited version the goal of the election 
chair is to introduce candidates from a pool of spoiler candidates so as to make his or her favorite candidate a 
winner of the election (in the constructive case) or prevent his or her despised candidate from being a winner 
(in the destructive case). As suggested by the name of the problem, in the unlimited version the chair can 
introduce any subset of the spoiler candidates (none, some, or all are all legal options) into the election. 

Name: S' -CCACu and S' -DCACu (control via adding an unlimited number of candidates). 

Given: Disjoint sets C and D of candidates, a collection V of voters specified via their preference lists over 
the candidates in the set CUD, and a distinguished candidate p ^C. 

Question (^f-CCACu): Is there a subset E of D such that p is a winner of the election with voters V and 
candidates CD El 
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Question (^f-DCACu): Is there a subset E of D such that p is not a winner of the <#" election with voters V 
and candidates CUE! 

The definition of (^'-CCACu was (using different notation) introduced by Bartholdi, Tovey, and 
Trick I1BTT92I . In contrast with the other control problems involving adding or deleting candidates or voters, 
in the adding candidates problem Bartholdi, Tovey, and Trick did not introduce a nonnegative integer k that 
bounds the number of candidates (from the set D) the chair is allowed to add. We feel this asymmetry in 
their definitions is not well justified^ and thus we define a with-change-parameter version of the control- 
by-adding-candidates problems, which we denote by ACi (where the "1" stands for the fact that part of the 
problem instance is a fimit on the number of candidates that can be added, in contrast with the model of 
Bartholdi, Tovey, and Trick IIBTT92I , which we denote by ACu with the "u" standing for the fact that the 
number of added candidates is unlimited, at least in the sense of not being limited via a separately input 
integer). The with-parameter version is the long-studied case for AV, DV, and DC, and we in this paper will 
use AC as being synonymous with ACi, and will thus use the notation AC for the rest of this paper when 
speaking of ACi. We suggest this as a natural regularization of the definitions and we hope this version will 
become the "normal" version of the adding-candidates problem for further study. However, we caution the 
reader that in earlier papers AC is used to mean ACu. 

In the present paper, we will obtain results not just for ACi but also for the ACu case, in order to allow 
comparisons between the results of this paper and those of earlier works. 

Turning now to what we mean by AC (equivalently, ACi), as per the above definition in (?-CCAC (i.e., 
(f-CCACi) we ask whether it is possible to make the distinguished candidate p a winner of some election 
obtained by adding at most k candidates from the spoiler candidate set D. (Note that k is part of the input.) 
We define the destructive version, (f-DCAC (i.e., (?-DCACi), analogously. 

Name: -CCAC and -DCAC (control via adding a limited number of candidates). 

Given: Disjoint sets C and D of candidates, a collection V of voters specified via their preference lists over 
the candidates in the set CUD, a distinguished candidate p G C, and a nonnegative integer k. 

Question (tf-CCAC): Is there a subset E of D such that \\E\\ < k and p is a winner of the election with 
voters V and candidates CUE! 

Question ((f-DC AC): Is there a subset £ of /) such that \\E\\ < and p is not a winner of the election with 
voters V and candidates CUE! 

Control via Deleting Candidates 

In constructive control via deleting candidates, the chair seeks to ensure that his or her favorite candidate p 
is a winner of the election by suppressing at most k candidates. In the destructive variant of this problem, the 
chair's goal is to block p from winning by suppressing at most k candidates other than p. 

Name: S'-CCDC and (?-DCDC (control via deleting candidates). 

Given: A set C of candidates, a collection V of voters represented via preference lists over C, a distinguished 
candidate p £C, and a nonnegative integer k. 

**Bartholdi, Tovey, and Trick IBTT92I are aware of this asymmetry. They write: "To a certain extent the exact formalization of a 
problem is a matter of taste. [. . . ] we could equally well have formalized [the problem of control via adding candidates] to be whether 
there are K or fewer candidates to be added [. . . ] It does not much matter for the problems we discuss, since both versions are of the 
same complexity." In contrast, the complexity of the problems studied here crucially hinges on which formalization is used, and we thus 
define both versions formally. 
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Question (^f-CCDC): Is it possible to by deleting at most k candidates ensure that p is a winner of the 
resulting (o election? 

Question (^f-DCDC): Is it possible to by deleting at most k candidates other than p ensure that p is not a 
winner of the resulting S" election? 

Control via Partition and Run-Off Partition of Candidates 

Bartholdi, Tovey, and Trick IIBTT92I gave two types of control of elections via partition of candidates. In 
both cases the candidate set C is partitioned into two groups, C\ and C2 (i.e., C1UC2 — C and C\{^C2~ 0), 
and the election is conducted in two stages. For control via run-off partition of candidates, the election's first 
stage is conducted separately on each group of candidates, C\ and C2, and the group winners that survive the 
tie-handling rule compete against each other in the second stage. In control via partition of candidates, the 
first-stage election is performed on the candidate set C\ and those of that election's winners that survive the 
tie-handling rule compete against all candidates from C2 in the second stage. 

In the ties-promote (TP) model, all first-stage winners within a group are promoted to the final round. In 
the ties-eliminate (TE) model, a first-stage winner within a group is promoted to the final round if and only if 
he or she is the unique winner within that group. 

Name: S-CCKPC and ^f-DCRPC (control via run-off partition of candidates). 

Given: A set C of candidates, a collection V of voters represented via preference lists over C, and a distin- 
guished candidate p €C. 

Question ((f-CCRPC): Is there a partition of C into C\ and C2 such that /? is a winner of the two-stage 
election where the winners of subelection {C\ , V) that survive the tie-handling rule compete against the 
winners of subelection (C2, V) that survive the tie-handling rule? Each subelection (in both stages) is 
conducted using election system S". 

Question ((f-DCRPC): Is there a partition of C into Cj and C2 such that p is not a winner of the two-stage 
election where the winners of subelection (Cj , V) that survive the tie-handling rule compete against the 
winners of subelection (C2, V) that survive the tie-handling rule? Each subelection (in both stages) is 
conducted using election system S". 

The above description defines four computational problems for a given election system (o : S -CCRPC-TE, 
(f-CCRPC-TP, ^-DCRPC-TE, and <f -DCRPC-TP. 

Name: S-CCPC and <f -DCPC (control via partition of candidates). 

Given: A set C of candidates, a collection V of voters represented via preference lists over C, and a distin- 
guished candidate p €C. 

Question (^f-CCPC): Is there a partition of C into Ci and C2 such that /? is a winner of the two-stage elec- 
tion where the winners of subelection {C\,V) that survive the tie-handling rule compete against all 
candidates in C2? Each subelection (in both stages) is conducted using election system S". 

Question (i^'-DCPC): Is there a partition of C into C\ and C2 such that p is not a winner of the two-stage 
election where the winners of subelection (Ci ,y) that survive the tie-handling rule compete against all 
candidates in C2? Each subelection (in both stages) is conducted using election system S. 

This description defines four computational problems for a given election system S": ^-CCPC-TE, 
-CCPC-TP, (f -DCPC-TE, and -DCPC-TP. 
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Control via Adding Voters 



In the scenario of control via adding voters, the chair's goal is to either ensure that p is a winner (in the 
constructive case) or ensure that p is not a winner (in the destructive case) via causing up to k additional 
voters to participate in the election. The chair can draw the voters to add to the election from a prespecified 
collection of voters (with given preferences). 

Name: ff -CCAV and (?-DCAV (control via adding voters). 

Given: A set C of candidates, two disjoint collections of voters, V and W, represented via preference lists 
over C, a distinguished candidate p, and a nonnegative integer k. 

Question (tf-CCAV): Is there a subset Q, \\Q\\ <k,of voters in W such that the voters in V UQ jointly elect 
p e C as a winner according to system S"! 

Question (^f-DCAV): Is there a subset Q, \\Q\\ < k, of voters in W such that the voters in V U 2 do not elect 
/? as a winner according to system S"? 



Control via Deleting Voters 

In the control via deleting voters case the chair seeks to either ensure that p is a winner (in the constructive 
case) or prevent p from being a winner (in the destructive case) via blocking up to k voters from participating 
in the election. (This loosely models vote suppression or disenfranchisement.) 

Name: S'-CCDW and (f -DCDV (control via deleting voters). 

Given: A set C of candidates, a collection V of voters represented via preference lists over C, a distinguished 
candidate p EC, and a nonnegative integer k. 

Question ((f-CCDV): Is it possible to by deleting at most k voters ensure that p is a winner of the resulting 
S" election? 

Question ((^-DCDV): Is it possible to by deleting at most k voters ensure that p is not a winner of the 
resulting S' election? 



Control via Partition of Voters 

In the case of control via partition of voters, the following two-stage election is performed. First, the voter 
set V is partitioned into two subcommittees, Vi and ¥2- The winners of election {C,Vi) that survive the tie- 
handling rule compete against the winners of (C, V?) that survive the tie-handling rule. Again, our tie-handling 
rules are TE and TP (ties-eliminate and ties-promote). 

Name: ff-CCPV and (?-DCPV (control via partition of voters). 

Given: A set C of candidates, a collection V of voters represented via preference lists over C, and a distin- 
guished candidate p G C. 

Question (ff-CCPV): Is there a partition of V into Vi and V2 such that p is a winner of the two-stage election 
where the winners of election (C, Vi ) that survive the tie-handling rule compete against the winners of 
(C, V2) that survive the tie-handling rule? Each subelection (in both stages) is conducted using election 
system . 
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Question (J'-DCPV): Is there a partition of V into Y\ and V2 such that p is not a winner of the two-stage 
election where the winners of election (C, Y\ ) that survive the tie-handling rule compete against the 
winners of (C, V2) that survive the tie-handling rule? Each subelection (in both stages) is conducted 
using election system S . 

Unique Winners and Irrationality 

Our bribery and control problems were each defined above only for rational voters and in the nonunique- 
winner model, i.e., asking whether a given candidate can be made, or prevented from being, a winner 
Nonetheless, we have proven all our control results both for the case of nonunique winners and (to be able 
to fairly compare them with existing control results, which except for the interesting "multi-winner" model 
of Procaccia, Rosenschein, and Zohar IIPRZ07I are in the unique-winner model) unique winners (a candidate 
is a unique winner if he or she is a winner and is the only winner). Similarly, all our bribery results are 
proven both in the unique-winner model and (to be able to fairly compare them with existing bribery results 
in the literature) in the nonunique-winner model. In addition to the rational-voters case, we also study these 
problems for the case of voters who are allowed to be irrational. As mentioned earlier, in the case of irrational 
voters, voters are represented via preference tables rather than preference lists. 

2.3 Graphs 

An undirected graph G is a pair {V{G),E{G)), where V{G) is the set of vertices and E{G) is the set of edges 
and each edge is an unordered pair of distinct vertices0 A directed graph is defined analogously, except that 
the edges are represented as ordered pairs. For example, if u and v are distinct vertices in an undirected graph 
G then G either has an edge e = {u,v} that connects u and v or it doesn't. On the other hand, if G is a directed 
graph then G either has an edge e' = (m, v) from u to v, or an edge e" = (v, u) from v to u, or both e' and e", 
or neither e' nor e". 

For a directed graph G, the indegree of a vertex u e V(G) is the number of G's edges that enter u (i.e., 
the number of edges of the form (v, u) in E{G)). Similarly, the outdegree of u G V (G) is the number of edges 
that leave u (i.e., the number of edges of the form (m, v) in E{G)). 

2.4 NP- Complete Problems and Reductions 

Without loss of generality, we assume that all problems that we consider are encoded in a natural, efficient 
way over the alphabet E = {0,1}. We use the standard notion of NP-completeness, defined via polynomial- 
time many-one reductions. We say that a computational problem A polynomial-time many-one reduces to a 
problem B if there exists a polynomial-time computable function / such that 

(VxeE*)[xeA 4=> f{x)eB]. 

A problem is NP-hard if all members of NP polynomial-time many-one reduce to it. Thus, if an NP-hard 
problem A polynomial-time many-one reduces to a problem B, then B is NP-hard as well. A problem is 
NP-complete if it is NP-hard and is a member of NP. When clear from context we will use "reduce" and "re- 
duction" as shorthands for "polynomial-time many-one reduce" and "polynomial-time many-one reduction." 

'in this paper, the symbols E and V are generally reserved for elections and voters, except the just introduced "overloading" of them 
to mean sets of edges and vertices in a given graph. The intended meaning of E and V will be clear from the context, even when our 
proofs involve multiple elections and graphs. 
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Our NP-hardness results typically follow via a reduction from either the exact-cover-by-3-sets problem 
or from the vertex cover problem (see, e.g., IIGJ79II ). These are well-known NP-complete problems, but we 
define them here for the sake of completeness. 

Name: X3C (exact cover by 3-sets). 

Given: A set B = {^i , . . . jb^k}, k> I, and a family of sets = {Si,. .. ,S„} such that for each ;, I < i <n, 
it holds that 5/ C B and = 3. 

Question: Is there a set A C {1, . . . ,«}, ||A|| ~ k, such that U/gA'^'' = B7 

The set A about which we ask in the above problem is called an exact cover ofB. It is a "cover" because 
every member of B belongs to some 5',- such that / e A, and it is "exact" because each member of B belongs 
to exactly one 5, such that / G A. 

Whenever we consider instances of the X3C problem, we assume that they are well-formed, that is, we 
assume that they follow the syntactic requirements stated in the above "Given" field (e.g., the cardinality of 
the set B is indeed a multiple of three). We apply this convention of considering only syntactically correct 
inputs to all other problems as well. Let A be some computational problem and let x be an instance of A. 
When we consider an algorithm for A, and input x is malformed, then we can immediately reject. When we 
are building a reduction from A to some problem B, then whenever we hit a malformed input x we can output 
a fixed y not in B. (In our reductions B is never E*, so this is always possible.) 

Copeland" elections can often be considered in terms of appropriate graphs. This representation is partic- 
ularly useful when we face control problems that modify the structure of the candidate set, since in this case 
operations on an election directly translate into suitable operations on the corresponding graph. For candidate 
control problems, we — instead of using reductions from X3C — construct reductions from the vertex cover 
problem. A vertex cover of an undirected graph G is a subset of G's vertices such that each edge of G is 
adjacent to at least one vertex from that subset. 

Name: VertexCover. 

Given: An undirected graph G and a nonnegative integer k. 

Question: Is there a set W such that W C V{G), ||W|| < k, and for every edge e G E{G) it holds that e n W ^ 
0? 

2.5 Resistance and Vulnerability 

Not all election systems can be affected by each control type; if not, the system is said to be immune to this 
type of control. For example, if a candidate c is not a Condorcet winner then it is impossible to make him or 
her a Condorcet winner by adding candidates (see I1BTT92I and ||HHR07a| for more such immunity results). 
However, for Copeland" elections it is easy to see that for each type of control defined in Section IZ21 there 
is a scenario in which the outcome of the election can indeed be changed via conducting the corresponding 
control action. If an election system is not immune to some type of control (as witnessed by such a scenario), 
the election system is said to be susceptible to that control type. 

Proposition 2.4 For each rational number a, < oc < 1, Copeland" is susceptible to each type of control 
defined in Section \Z2\ 
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We say that an election system (Copeland" or Copelandj^^y^i^j^j, in our case) is resistant to a particular 
attack (be it a type of control or of bribery) if the appropriate computational problem is NP-hard and sus- 
ceptibility holds|j On the other hand, if the computational problem is in P and susceptibility holds, then we 
say the system is vulnerable to this attack. Because of how our bribery and control problems are defined, the 
vulnerability definition merely requires that there exist a polynomial-time algorithm that determines whether 
a successful bribe or control action exists on a given input. However, in every single one of our vulnerability 
proofs we will provide something far stronger. We will provide a polynomial-time algorithm that actually 
finds a successful bribe or control action on each input for which a successful bribe or control action exists, 
and on each input where no successful bribe or control action exists will announce that fact. 

The notions of resistance and vulnerability (and of immunity and susceptibility) for control problems in 
election systems were introduced by Bartholdi, Tovey, and Trick IIBTT92I . and we here follow the defini- 
tion alteration of liHHROTbl of resistance from "NP-complete" to "NP-hard," as that change is compelling 
(because under the old definition, NP-completeness, things could actually become nonresistant by being too 
hard, which is not natural). However, for all resistance claims in this paper NP-membership is clear, and so 
NP-completeness in fact does hold. 

3 Bribery 

In this section we present our results on the complexity of bribery for the Copeland" election systems, where 
a is a rational number with < a < 1. Our main result, which will be presented in Section lTTl is that each 
such system is resistant to bribery, regardless of voters' rationality and of our mode of operation (constructive 
versus destructive). In Section [3l2l we will provide vulnerabihty results for Llull and Copeland*^ with respect 
to "microbribery." 

3.1 Resistance to Bribery 

Theorem 3.1 For each rational a, Q < a < I, Copeland" and Co^e.\?iT^A'^^^^^^^^ are resistant to both con- 
structive and destructive bribery, in both the nonunique-winner model and the unique-winner model. 

We prove Theorem l3.1l via Theorems l3 . 2l and [3 .4l and Corollarv l3.5l below. Our proofs employ an approach 
that we call the UV technique. For the constructive cases, this technique proceeds by constructing bribery 
instances where the only briberies that could possibly ensure that our favorite candidate p is a winner involve 
only voters who rank a group of special candidates (often the group will contain exactly two candidates, u 
and v) above p. The remaining voters, the bystanders so to speak, can be used to create appropriate padding 
and structure within the election. The destructive cases follow via a cute observation regarding the dynamics 
of our constructive cases. 

The remainder of this section is devoted to proving Theorem |3.1| We start with the case of rational voters 
in Theorems 13.21 and 13.41 below and then argue that the analogous results for the case of irrational voters 
follow via, essentially, the same proof. 

Theorem 3.2 For each rational number a, < (X < I, Copeland" is resistant to constructive bribery in the 
unique-winner model and to destructive bribery in the nonunique-winner model. 

Proof. Fix an arbitrary rational number a with < a < 1 . Our proof provides reductions from the X3C 
problem to, respectively, the unique-winner variant of constructive bribery and to the nonunique-winner 

*It is trae that for some unnatural election systems immunity to bribery holds, e.g., the election system "Every candidate is a winner" 
is immune to all types of bribery. However, our Copeland" -type systems are all susceptible to all the bribery types we look at in this 
paper, so we won't further explicitly discuss or state susceptibility for the bribery cases. 
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variant of destructive bribery. Our reductions will differ regarding only the specification of the goal (i.e., 
regarding which candidate we attempt to make a unique winner or which candidate we prevent from being a 
winner) and thus we describe them jointly as, essentially, a single reduction. 

Our reduction will produce an instance of an appropriate bribery problem with an odd number of voters, 
and so we will never have ties in head-to-head contests. Thus our proof works regardless of which rational 
number a with < a < 1 is chosen. 

Let {B,S') be an instance of X3C, where B = {bi,b2, ■ ■ ■ ,^3a}, ^ is a collection {5'i,5'2, ■■■ ,S„} of three- 
element subsets of B with U}=i Sj — B, and ^ > 1. If our input does not meet these conditions then we output 
a fixed instance of our bribery problem having a negative answer 

Construct a Copeland" election E = {C,V) as follows. The candidate set C is {u,\',p} IJB, where none 
of u, V, and p is in B. The voter set V contains 2n+4k+ 1 voters of the following types. 

1. For each 5,, we introduce one voter of type (i) and one voter of type (ii): 

(i) ii>v>Si> p>B-Si, 

(ii) B-Si> p> u>v> Si. 

2. We introduce k voters for each of the types (iii)-l, (iii)-2, (iv)-l, and (iv)-2; 

(iii)-l u>v>p>B, 

(iii) -2 v>u> p>B, 

(iv) -l u > B > p > V, 
(iv)-2 v> B > p> u. 



3. We introduce a single type (v) voter: 



(v) B> p>u>v. 



We have the following relative vote-scores: 

1. vs£(m,v) = 2n+ 1 > 2fc+ 1, where the inequality follows from our assumption \J]=\Sj ~ B (which 
implies «> |lB||/3 = yt), 

2. v5e{u,p) ~vse{v,p) ~2k~\, 

3. for each / G {1,2, . . . ,3^}, vsE{u,bi) = vs£(v,/7,) >2k+l, 

4. for each ; G {1,2, .. . ,3k}, vsE{bi,p) = 1, and 

5. for each i,j G {1,2, .. . ,3k} with / 7^ j, \vsE{bi,bj)\ = 1. 

For example, to see that \SE{u,bi) > 2^+ 1 for each / G {1,2, .. . ,3k}, note that each bj is in at least one Sj 
because of Uj'=i = B, so the voters of types (i) and (ii) give u an advantage of at least two votes over bj. 
Furthermore, the voters of types (iii)-l, (iii)-2, (iv)-l, and (iv)-2 give u an advantage of 2k additional votes 
over each bi, and the single type (v) voter gives each bi a one-vote advantage over u. Summing up, we obtain 
vsE{u,bi) >2 + 2A:— 1 = 2^+1. The other relative vote-scores are similarly easy to verify. 

These relative vote-scores yield the following Copeland" scores or upper bounds on such scores: 

1. score'^iu) =3k + 2, 

2. icore" ( v) =3/t+l, 
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3. for each / G {1,2, .. . ,3^}, score" [bi) < 3k, and 

4. score'^{p) ~ 0. 

To prove our theorem, we need the following claim. 
Claim 3.3 The following three statements are equivalent: 

1. iB,y)£X3C. 

2. Candidate u can be prevented from winning via bribing at most k voters ofE. 

3. Candidate p can be made a unique winner via bribing at most k voters ofE. 

Proof of Claim |331 ([B implies (|2]i: It is easy to see that if {B, .f/') G X3C then there is a bribe involving k 
or fewer voters that prevents u from being a winner: It is enough to bribe those type (i) voters that correspond 
to a cover of size k to report p as their top choice (while not changing anything else in their preference lists): 
p>u>v>Si>B — Si. Call the resulting election In E' the following relative vote-scores change: 
\Se'{p,u) ~ vs£/(/5, v) — n + k — {n — k) —2k+l = 1 and vsEi{p,bi) > 1 for each ; £ {1,2, . . . ,3k}, while all 
other relative vote-scores remain unchanged. Thus score", (p) =^3k + 2, score", (m) = 3^ + 1 , score", (v) = 3k, 
and score", (bi) < 3k for each ; G {1,2, . . . ,3k}, so p defeats all other candidates and is the unique winner In 
particular, this bribe (of at most k voters in E) ensures that u is not a winner. 

^ implies (O: Suppose that there is a bribe involving k or fewer voters that prevents u from being a 
winner Note that u defeats everyone except p by more than 2k votes in E. This means that via bribery of 
at most k voters m's score can decrease by at most one. Thus, to prevent u from being a winner via such 
a bribery, we need to ensure that u receives a Copeland" score of 3^ + 1 and some candidate other than u 
gets a Copeland" score of 3k + 2, that is, that candidate defeats everyone. Neither v nor any of the ^,'s can 
possibly obtain a Copeland" score of 3fc + 2 via such a bribery, since bribery of at most k voters can affect 
only head-to-head contests where the relative vote-scores of the participants are at most 2k. Thus, via such a 
bribery, u can be prevented from winning only if p can be made a (in fact, the unique) winner of our election. 

(O implies ([T]i: Let W be a set of at most k voters whose bribery ensures that p is a unique winner of our 
election. Thus we know that \\W\\ ~ k and that W contains only voters who rank both u and v above p (as 
otherwise p would not defeat both u and v), which is the case only for voters of types (i), (iii)-l, and (iii)-2. 
Furthermore, a bribery that makes p the unique winner has to ensure that p defeats all members of B; note that 
the type (iii)-l and (iii)-2 voters in E already rank p above all of B. Thus, via a simple counting argument, W 
must contain exactly k type (i) voters that correspond to a size-A: cover of B. □ Claim [33] 

Since our reduction is computable in polynomial time. Claim 13.31 completes the proof of 
Theorem |3.2| □ 

Theorem 3.4 For each rational a, < a < 1, Copeland" is resistant to constructive bribery in the 
nonunique-winner model and to destructive bribery in the unique-winner model. 

Proof. Fix an arbitrary rational number a with < a < 1 . As in the proof of Theorem l3.2l we handle the 
appropriate constructive and destructive cases jointly using essentially the same reduction for each of them, 
differing only in the specification of the goal of the briber. Thus we describe our reductions from X3C to the 
appropriate constructive and destructive bribery problems as a single reduction, separately specifying only 
the goals for each of the cases. 

Our reduction works as follows. We are given an X3C instance {B,,5^), where B = {b\ ,b2T ■ ■ , b^k} is 
a set, y is a collection {5'i,5'2, . . . of three-element subsets of B with U;'=i Sj = B, and k is a positive 
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integer. We form an election E = (C, V), where C = {p,s,t,u,v}UB and where V is as specified below. In the 
nonunique- winner constructive case we want to ensure that p is a winner and in the unique-winner destructive 
case we want to prevent s from being the unique winner In each case we want to achieve our goal via bribing 
at most k voters from V. V contains 2« +24-k+ 1 voters of the following types: 

1. For each 5,, we introduce one voter of type (i) and one voter of type (ii): 

(i) s>t>u>v>Si>p>B- Si, 

(ii) B-Si>p>v>u>t>s> Si. 

2. We introduce k voters for each of the types (iii)-l, (iii)-2, (iv)-l, and (iv)-2: 

(iii)-l s>t>u>v>p>B, 

(iii) -2 s>t>v>u>p> B, 

(iv) -l M > B > p> s>v>t, 
(iv)-2 v>B>p>s>u>t. 

3. We introduce 2Qk normalizing voters: 

2k voters of type (v)-l 
2k voters of type (v)-2 
3k voters of type (v)-3 
3^ voters of type (v)-4 
3k voters of type (v)-5 
k voters of type (v)-6 
3k voters of type (v)-7 
3k voters of type (v)-8 

4. Finally, we introduce a single type (vi) voter: 

(vi) B>p>u>v>s>t. 

In the nonunique-winner constructive case we want to ensure that p is a winner and in the unique-winner 
destructive case we want to prevent s from being the unique winner. In each case we want to achieve our 
goal via bribing at most k voters. Thus within our bribery we can affect the results of head-to-head contests 
between only those candidates whose relative vote-scores are, in absolute value, at most 2k. In E, we have 
the following relative vote-scores: 

1. vs£(i,f) > 2k, vse{s,u) > 2k, vse{s,\') > 2k, vsE{t,p) > 2k, vsE{t,u) > 2k, vs£(v,f) > 2k, and 
vse{u, v) > 2k, 

2. vse{s,p) = vs£-(m,p) ^vse{\',p) ^2k- 1, 

3. for each / G {1,2, . . . ,3^}, vsE{bi,p) — 1, vs£(i,/7,) > 2k, vsE{t,bi) > 2k, vsE{u,bi) > 2k, and 
vsE{v,bi) > 2k, and 

4. for each /,y G {1,2, . . . ,3A;} with / 7^ j, wehave \vsE{bi,bj)\ = I. 

To analyze E, let £' denote an arbitrary election resulting from E via bribing at most k voters. The relative 
vote-scores among any two candidates in E yield the following Copeland" scores: 

1. score'^{s) = 3k+4, and since we have vs£(5,c) > 2k for each candidate c EC with p c ^ s, it follows 
that 3^ + 3 < score'^,{s). 



u>v>t>p>s>B, 
u>v>s>t>p>B, 
s>t>u>v>p>B, 
s>v>t>u> p>B, 
t> B > p>u> s>v, 
B >p>s>u>v>t, 
s>B>p>ii>v>t, 
B > p> s>v >t > u. 
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2. Foreachjc G {t,u,v}, score"{x) = 3k + 2, and since we have vse{s,x) > 2k, vsE{t,u) > 2k, vs£(m,v) > 
2k, and vs£(v, r) > 2k, it follows that score",{x) <3k + 2. 

3. score'^{p) = 0, and since we have vsE{t,p) > 2A:, it follows that score",{p) < 3A: + 3. 

4. For each / £ {1,2, . . . ,3A:}, score" (bj) < 3k, and since we have vs£(x,/7,) > 2A: for each candidate 
X S {s,f,M, v}, it follows that score'^,{bj) < 3k. 

Thus is the unique winner of E, and the only candidate who is able to prevent s from being the unique 
winner via at most k voters being bribed is p. 

We claim that {B, S^^ € X3C if and only if there is a bribe involving at most k voters that prevents s from 
being the unique winner. (Equivalently, {B,,5^) G X3C if and only if there is a bribe of at most k voters that 
ensures that p is a winner) 

From left to right, if ,5^ has an exact cover for B, then, via bribing the k type (i) voters that correspond 
to this cover, s can be prevented from being the unique winner. In more detail, if the k bribed voters rank 
p on top while leaving their preferences otherwise unchanged (i.e., their votes are now p > s > t > u > 
v > Si > B — Si), then the only relative vote-scores that have changed in this new election, call it E', are: 
vse'{p,s) = vs£/ (/?,«) = vse'{p,v) = 1,vse' {t,p) = — 1, and vsE'{p,bi) = 1 for each i G {1,2, . . .,3k}. It 
follows that p and s tie for winner in £' with score", (p) = score", {s) =3k + 3. 

From right to left, suppose there is a bribe of at most k voters that prevents s from being the unique winner. 
By construction, for each election E' that results from E via bribing at most k voters, this is possible only if 
score", {p) = score", {s) = 3k + 3. Let W be a set of at most k voters whose bribery ensures that s is not the 
unique winner in the resulting election. Since \SE{t,p) > 2k, it is not possible for p to win the head-to-head 
contest with f via such a bribery. Thus, for p to obtain a score of 3k + 3, p must win the head-to-head contests 
with each candidate in {s,u,v} L) B. However, since \se{s,p) = \se{u,p) = \se{v,p) ~2k~l, we have 
\\W\\ = k and every voter in W must rank each of s, u, and v ahead of p. Thus W can contain only voters 
of types (i), (iii)-l, (iii)-2, (v)-2, (v)-3, and (v)-4. However, since p also needs to defeat each member of B 
and since all voters of types (iii)-l, (iii)-2, (v)-2, (v)-3, and (v)-4 rank p ahead of each member of B, W must 
contain exactly k type (i) voters that correspond to an exact cover for B. 

Since our reduction is computable in polynomial time, this completes the proof of Theorem l3.4l □ 

The proofs of the above theorems have an interesting feature. When we discuss bribery, we never 
rely on the fact that the voters are rational. Thus we can allow the voters to be irrational and form 
Copelandj^^jjjji^^j-bribery and Copelandj^^jj^j^^^j-destructive-bribery instances simply by deriving the voters' 
preference tables from the voters' preference lists given in the above proofs. It is easy to see that the proofs 
remain valid after this change; in the proofs we assume that each bribed voter, after the bribery, prefers p to 
all other candidates, but we do not make any further assumptions (and, in particular, we do not use linearity 
of the preferences). Thus we have the following corollary to the proofs of Theorems l3.2l and l3.4l 

Corollary 3.5 For each rational number a, < a < 1, CopelandjJ^.^jj^j^^j is resistant to both constructive 
bribery and destructive bribery, in both the nonunique-winner tnodel and the unique -winner model. 

Theorems |3.2| and |3.4| and Corollary [33] together constitute a proof of Theorem |3 . 1 1 and establish that for 
each rational a, < a < 1, Copeland" and CopelandJ^^jj^^j^^j possess broad — essentially perfect — resistance 
to bribery regardless of whether we are interested in constructive or destructive results. However, the next 
section shows that this perfect picture is, in fact, only near-perfect when we consider microbribes, which 
don't allow changing the complete preferences of voters at once but rather change the results of head-to-head 
contests between candidates in the voters' preferences. We will show that there is an efficient way of finding 
optimal microbriberies for the case of irrational voters in Copeland" elections. 
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3.2 Vulnerability to Microbribery for Irrational Voters 



In this section we explore the problems related to microbribery of irrational voters. In standard bribery 
problems, which were considered in Section 13.11 we ask whether it is possible to ensure that a designated 
candidate p is a winner (or, in the destructive case, to ensure that p is not a winner) via modifying the 
preference tables of at most k voters. That is, we can at unit cost completely redefine the preference table of 
each voter bribed. So in this model, we pay for a service (namely, the modification of the reported preference 
table) and we pay for it in bulk (when we buy a voter, we have secured his or her total obedience). However, 
sometimes it may be far more reasonable to adopt a more local approach in which we have to pay separately 
for each preference-table entry flip — to pay more the more we alter a vote. 

Throughout the remainder of this section we will use the term microbribe to refer to flipping an entry 
in a preference table, and we will use the term microbribery to refer to bribing possibly irrational voters via 
microbribes. Recall that by "irrational voters" we simply mean that they are allowed to have, but not that they 
must have, irrational preferences. 

For each rational a, < a < 1, we define the following two problems. 

Name: Copelandj^j^jj^j^^j-microbribery and Copelandj^^jj^j^j^j-destructive-microbribery. 

Given: A set C of candidates, a collection V of voters specified via their preference tables over C, a distin- 
guished candidate p ^C, and a nonnegative integer k. 

Question (constructive): Is it possible, by flipping at most k entries in the preference tables of voters in V, 
to ensure that is a winner of the resulting election? 

Question (destructive): Is it possible, by flipping at most k entries in the preference tables of voters in V, to 
guarantee that p is not a winner of the resulting election? 

We can flip multiple entries in the preference table of the same voter, but we have to pay separately 
for each flip. The microbribery problems for Copelandj^j^jj^^j^^jj are very similar in flavor to the so-called 
bribery' problems for approval voting that were studied by Faliszewski, Hemaspaandra, and Hemaspaan- 
dra IIFHH06al . where unit cost for flipping approvals or disapprovals of voters are paid. However, the proofs 
for Copelandj^^jjjjj^^j seem to be much more involved than their counterparts for approval voting. The reason 
is that CopelandJ^^jj^jj^j elections allow for very subtle and complicated interactions between the candidates' 
scores. 

Before we proceed with our results, let us define some notation that will be useful throughout this section. 
Let E be an election with candidate set C = {ci,C2, ■ ■ ■ ,c„,} and voter collection V = {vi, V2, . . . , v,,}. We 
define two functions, wincostE and tiecostE, that describe the costs of ensuring a victory or a tie of a given 
candidate in a particular head-to-head contest. 

Definition 3.6 Let E ~ (C, V) be an election and let Cj and cj be two distinct candidates in C. 

1. By wincostE {ci,Cj) we mean the minimum number of microbribes that ensure that Ci defeats cj in their 
head-to-head contest. If Ci already wins this contest then wincostE {ci,Cj) ~ 0. 

2. By tiecostE{ci,Cj) we mean the minimum number of microbribes that ensure that Ci ties with cj in their 
head-to-head contest, or oa ifE has an odd number of voters and thus ties are impossible. 

Our first result regarding microbribery is that destructive microbribery is easy for CopelandJ^j^jj^^j^^j. Since 
this is the paper's first vulnerability proof, we take this opportunity to remind the reader (recall Section |23] | 
that although the definition of vulnerability requires only that there be a polynomial-time algorithm to de- 
termine whether a successful action (in the present case, a destructive microbribery) exists, we will in each 
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vulnerability proof provide something far stronger, namely a polynomial-time algorithm that both determines 
whether a successful action exists and that, when so, finds a successful action (e.g., for our flow algorithms 
later on, the successful action will be implicit in the flow computed). 

Theorem 3.7 For each rational (X, < (X < I, Copelandj^^y^ji^^^j is vulnerable to destructive microbribery in 
both the nonunique-winner model and the unique-winner model. 

Proof. Fix an arbitrary rational number a with < a < 1. We give an algorithm for CopelandjJ^.^jjjj|^^[, for 
destructive microbribery in the nonunique-winner model. (We omit the analogous algorithm for the unique- 
winner case.) 

Let E = {C,V) be the input election where C — {p,ci,C2, ■ ■ ■ ,c„,} and V = {vi, V2, . . . , v„}, and let k be 
the number of microbribes that we are allowed to make. We define the predicate M{E , p,Ci,k) to be true if 
and only if there is a microbribery of cost at most k that ensures that c,'s score is higher than that of p. Our 
algorithm computes M{E ,p,Ci,k) for each c, G C and accepts if and only if it is true for at least one of them. 
We now describe how to compute M{E ,p,Ci,k)^ 

We set El, E2, and £3 to be elections identical to E except that 

1. inEi, p defeats c, in their head-to-head contest, 

2. in E2, p loses to c, in their head-to-head contest, and 

3. in £3, /9 ties c, in their head-to-head contest (we disregard £3 if the number of voters is odd and thus 
ties are impossible). 

Let ki, k2, and k^ be the minimum costs of microbriberies that transform E to Ei, E to E2, and E to £3, 
respectively. Such microbriberies involve only the head-to-head contest between p and c,. We define the 
predicate M' [E' ,p,Ci,k'), where E' G {Ei,E2,Et,^ and where k' is an integer, to be true if and only if there 
is a microbribery of cost at most k' that does not involve the head-to-head contest between p and c, but that 
ensures that c,'s CopelandJ^^jj^j^^j score is higher than p's. It is easy to see that 

M{E,p,Ci,k) ^ {M'{EuP,c„k-ki)yM'{E2,p,Ci,k-k2)yM'{Ei,p,Ci,k-ki)). 

Thus it is enough to focus on the problem of computing M' {E\p,Ci,k'). 

Let {E' ,k') be one of {E\,k — ky), (£'2,^ — ^2), and {E^^k ~ kj,). Define promote^i{ci,w' ,w" ,t), where 
Ci e C is a candidate and w', w", and t are nonnegative integers, to be the minimum cost of a microbribery 
that, when applied to E', increases c,'s Copelandj^^j^^i^^j score by w' + (1 — a)w" + at via ensuring that 

1. Ci wins an additional w' head-to-head contests against candidates in C — {p} that used to defeat c, 
originally, 

2. c, wins an additional w" head-to-head contests against candidates in C — {p} with whom c, used to tie 
originally, and 

3. Ci ties an additional t head-to-head contests with candidates in C — {p} that used to defeat c, originally. 

If such a microbribery does not exist then we set promote^i{ci,w' ,w" ,t) to be 00. It is an easy exercise to see 
that promote^! is computable in polynomial time by a simple greedy algorithm. 

We define demote e' {c i, £',£" ,t) to be the minimum cost of a microbribery that, when applied to election 

decreases p's score by £' + al" + (1 — n)t via ensuring that 

1 . p loses an additional £! head-to-head contests to candidates in C — {c,} whom p used to defeat origi- 
nally, 

'We stress that we have optimized our algorithm for simplicity rather than for performance. 
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2. p loses an additional £" head-to-head contests to candidates in C— {c,} with whom p used to tie 
originally, and 

3. p ties an additional t head-to-head contests with candidates in C — {c,} whom p used to defeat origi- 
nally. 

If such a microbribery does not exist then we set demote [c i ^ l\ i" ,t) to be oo. Note that demote^/ can be 
computed in polynomial time using an algorithm similar to that for promote^,. 

Naturally, the microbriberies used implicitly within promote^/ (c,-, w', w", f ')> within demote^;! (c,-, f "), 
and within transforming E to E' are "disjoint," i.e., they never involve the same pair of candidates. Thus 
M'{E',p,Ci,k') is true if and only if there exist integers w' ,w" ,£',£" ,t' ,t" G {0, 1, . . . ,ot} such that 

score'^,{ci) + {w' + £' + {I - a){t" + w") + a{t' + £")) - score'^,{p) > 

and 

promote^i{ci,w' ,w" ,t') + demote £i{ci,£\£'\t") < k. 

There are only polynomially many combinations of such W ^w" ,£',£" ,t' , and r", and we can try them all. Thus 
we have given a polynomial-time algorithm for M'{E\p,Cj,k'). Via the observations given at the beginning 
of our proof this implies thatM{E,p,Ci,k) is computable in polynomial time and the proof is complete. □ 

The above destructive-case algorithm and approach is fairly straightforward; in the destructive case we 
do not need to worry about any side effects of promoting c and demoting p. The constructive case is more 
complicated, but we still are able to obtain polynomial-time algorithms via a fairly involved use of flow 
networks to model how particular points shift between candidates. In the remainder of this section we restrict 
ourselves to the values a G {0, 1 } or settings where the number of voters is odd and so ties never happen. We 
remind the reader that Copeland' and Copeland^^jj^jj^j^j, respectively, refer to Llull voting. 

A flow network is a network of nodes with directed edges through which we want to transport some 
amount of flow from the source to the sink (these are two designated nodes). Each edge e can carry up to c{e) 
units of flow, and transporting each unit of flow through e costs a{e). In the min-cost-flow problem we have 
a target flow value F, and the goal is to find a way of transporting F units of flow from the source to the sink, 
while minimizing the cost. (If there is no way of achieving target flow F, the cost in effect is infinite.) 

We now define the notions related to flow networks more formally. Let N = {0,1,2,...} and Z — 
{...,-2,-1,0,1,2,...}. 

Definition 3.8 1. A flow network is a quintuple {K,s,t,c,a), where K is a set of nodes that includes the 
source s and the sink t, c : is the capacity function, and a : is the cost function. We 

assume that c{u,u) = a{u,u) = for each node u G K, and that at most one of c{u,v) and c(v,m) is 
nonzero for each pair of distinct nodes u,v ^ K. We also assume that if c{u,v) = then a(u,v) ^ as 
well. 

2. Given a flow network {K, s,t,c, a), a flow is a function f '.K^ that satisfies the following conditions: 

(a) For each u,v £ K, we have f{u,v) < c(m, v), i.e., capacities limit the flow. 

(b) For each u,v £K, we have f{u,v) = — /(v, m)]^ 

(c) For each u £ K — {s,t}, we have Y,veK fi^'i^') =0, i.e., the flow is conserved in all nodes except 
the source and the sink. 

^Note that each flow is fully defined via its nonnegative values. Whenever we speak of a flow (e.g., when defining some particular 
flows) we will just speak of its nonnegative part. 
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3. The value of flow / is: 

flowvalue{f) = ^/(i,v). 

veK 

The particular flow network we have in mind will always be clear from the context and so we will not 
indicate it explicitly (we will not write it explicitly as a subscript to the function flowvalue). 

4. The cost of flow / is defined as: 

flowcost{f) ^ a{u,v)f{u,v). 

u,veK 

That is, we pay the price a{u, v)for each unit of flow that passes from node u to node v. 

Given a flow network (/r,s,f,c,fl) we will often use the term edges to refer to pairs of distinct nodes 
(m, v) S for which c(m, v) > 0. 

Below we define the min-cost-flow problem, which is well known from the literature. The definition we 
employ here is not the most general one but will suffice for our needs. (Readers seeking a broader discussion 
of the problem may wish to see, for example, the monograph by Ahuja, Magnanti, and Orlin IIAM093I .) 

Definition 3.9 We define the min-cost-flow problem as follows: Given a flow network {K,s,t,c,a) and a 
target flow value F, flnd a flow f that has value F ( if one exists) and has minimum cost among all such flows, 
or otherwise indicate that no such flow f exists. 

The min-cost-flow problem has a polynomial-time algorithm^ There is a large body of work devoted 
to flow problems and we will not even attempt to provide a complete list of references here. Instead, we 
again point the reader to the excellent monograph by Ahuja, Magnanti, and Orlin IIAM093L which provides 
descriptions of polynomial-time algorithms, theoretical analysis, and numerous references to previous work 
on flow-related problems. We also mention that the issue of flows is so prevalent in the study of algorithms 
that the textbook of Gormen et al. IIGLRSOll p. 787] contains an exposition of the min-cost-flow problem. 

Goming back to the study of constructive microbribery for Llull and Gopeland", with irrational voters 
allowed, we now present the following result. 

Tlieorem 3.10 For a G {0,1}, Copelandj^j^jj^j^^j is vulnerable to constructive microbribery, in both the 
nonunique-winner model and the unique-winner model. 

We prove Theorem 13.101 via Lemmas l3.11l through l3.17] below. which cover three cases: (a) an odd 
number of voters, where all Gopelandj^^jj^jj^j^j elections with < a < 1 are identical due to the lack of ties, 
(b) GopelandJj.j.^jjQ|jjjj with an even number of voters, and (c) Gopelandji^j^jj^j^^j with an even number of voters. 
These lemmas only discuss the nonunique-winner model but in each case it is easy to see how to change the 
algorithms and proofs to make them work for the unique-winner model. 

Lemma 3.11 For each rational a with < a < 1, there is a polynomial- time algorithm that solves the con- 
structive microbribery problem for Gopelandj^j^jj^^j^^^i elections with an odd number of voters ( in the nonunique- 
winner model). 

'The min-cost-flow problem is often defined in terms of capacity and cost functions that are not necessarily hmited to nonnegative 
integer values and so the coiTesponding flows are not restricted to integer values either However, crucially for us, it is known that if the 
capacity and cost functions have integral values (as we have assumed) then there exist optimal solutions to the min-cost-flow problem 
that use only integer-valued flows and that can be found in polynomial time. 
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Edge 


Parameters 


e= (i,c,'), 
where c, € C 


c(e) = icore"(c,) 
a(e) = 


e = (c;,c;), 

where c;,Cj G C and vs£(c/,Cj) > 


c(e) = 1 

fl(e) = wincostE{cj,Cj) 


e = (co,f) 


c{e) = T 
fl(e) =0 


e = (c,-,f), 

where ; > and c,- € C 


c{e) = T 
a{e) = B 


every other edge e 


a{e) = 



Figure 1: Edge capacities and costs for min-cost-flow instance I{T), built from election E. 

Proof. Our input is a nonnegative integer k (the budget) and an election E = {C,V), where the candidate 
set C is {c(),ci ,c„,}, the number of voters is odd, and p = cq is the candidate whose victory we want to 
ensure via at most k microbribes. Note that we interchangeably use p and cq to refer to the same candidate, 
since it is sometimes convenient to be able to speak of p and all other candidates uniformly. As the number 
of voters is odd, ties never occur. Thus any candidate c,- has the same Copeland{^.jj(jpjj^[ score for each rational 
value of a, < a < 1. Fix an arbitrary such a. 

We give a polynomial-time algorithm for the constructive microbribery problem. A high-level overview 
is that we try to find a threshold value T such that there is a microbribery of cost at most k that transforms E 
into E' such that (a) p has score'^, exactly T, and (b) every other candidate has score", at most T . 

Let B be a number that is greater than the cost of any possible microbribery within E (e.g., B — \\V\\ ■ 
||C|p + 1). For each possible threshold T, we consider a min-cost-flow instance I{T) with node set K = 
C U {i,f }, where s is the source and t is the sink, the edge capacities and costs are specified in Figure[il and 
the target flow value is 

. V , l|C||(||C||-l) 

F = 2^ score E[ci) = . 

c.ec 

Example 3.12 For illustration, consider the following example. Suppose the given election E has four can- 
didates and three voters, and the preference tables of the voters (who each happen to be rational in this 
example) can be obtained from their preference orders that are shown in Figure^ which also gives the cor- 
responding values ofy^E{ci,Cj)for each pair of candidates. Thus we have 5core"(co) = 2, score"(ci) = 0, 
icore"(c2) = 3, and score'^icj,) = 1. Suppose further that we are allowed to perform one microbribe, so 
k = \. Clearly, one microbribe that changes the preference of the third voter from c^ > cq to cq > C2 will flip 
the outcome of their head-to-head contest from C2 winning to cq winning, which is enough to reach our goal 
of making cq win the election, and this is of course the cheapest possible successful microbribery. Finally, 
note that in this example we have B = 49. 

For each threshold T with < T <3, the flow network I{T) corresponding to this instance {E,co,k) of 
the constructive microbribery problem is shown in Figure\3] and we have a target flow value ofF = 6. Every 
edge e in this flow network is labeled by the pair (c(e),a(e)) of numbers that give the capacity and the cost 
of edge e, respectively. 

To continue the proof of Lemma p.lll note that with an odd number of voters, constructive microbribery 
in Copelandj^^jjjji^^j simply requires us to choose for which pairs of distinct candidates we want to flip the 
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VS£(c,,C;) 


Co 


Cl 


C2 


C3 


Voter 1 : 


CO > Cl > C2 > C3 


CO 





1 


-1 


1 


Voter 2 : 


C3 > C2 > Cl > Co 


Cl 


-1 





-1 


-1 


Voter 3 : 


C2 > Co > C3 > Cl 


C2 


1 


1 





1 






C3 


-1 


1 


-1 






Figure 2; Sample election E for Example |3.12| in the proof of Lemma p.lll 




Figure 3: Flow network/(r) corresponding to the instance {E,co,k) of Example l3.12l 

outcome of their head-to-head contest in order to ensure p's victory. Thus it is sufficient to represent a 
microbribery M as a collection of pairs (c,-,Cj) of distinct candidates for whom we need to flip the result of 
their head-to-head contest from c, winning to Cj winning. Clearly, given such a collection M, the cheapest 
way to implement it costs 

^ wincostE[cj,Ci). 

A crucial observation for our algorithm is that we can directly translate flows to microbriberies using the 
following interpretation. Let / be a flow (as per Definition 13.81 with all edge flows being integers) of value 
F within instance I{T). The units of flow that travel through the network correspond to Copelandj^j^jj^^j^^j 
points. For each c, G C, we interpret the amount of flow that goes directly from s to c, as the number of 
CopelandjJ|.^jji^i^^[ points that c, has before any microbribery is attempted^B and the amount of flow that goes 
directly from c,- to t as the number of CopelandjJj.^j.gj^^j points that c, has after the microbribery (defined by 
the flow). The units of flow that travel between distinct c,'s (i.e., through edges of the form (c,,cy), / 7^ j) 
correspond to the microbribes exerted: A unit of flow traveling from node c, to cj corresponds to changing 
the result of the head-to-head contest between c, and cj from c, winning to cj winning. In this case, the 
Copelandj^^jjjji^^j point moves from c,- to cj and the cost of the flow increases by a{ci,Cj) = wmcost{cj,Ci), 
exactly the minimum cost of a microbribery that flips this contest's result. Let M/ be the microbribery defined, 

'"Note that for each c, £ C any flow of value F within I(T) needs to send exactly i-corej? (cj) units from s to c,-. 
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procedure Copelandj".^,;j,j^3|-odd-microbribery (£ = (C, V) , k, p) 
begin 

if p is a winner of E tlien accept; 

forr = Oto ||C||-ldo 
begin 

build an instance I{T) of min-cost-flow; 

if /(r) has no flow of value F then 

restart the for loop with the next value of T\ 

/ = a minimum-cost flow for I{T); 

if /(co,f) < T then restart the loop; 

K ^flowcost{f) -B-{F~T); 

ifK<k then accept; 
end; 
reject; 
end 



Figure 4: The constructive microbribery algorithm for Copelandj^^jy^j^^j elections with an odd number of 
voters. 

as just described, by flow /. It is easy to see that 

flowcost{f ) ^ B ■ {F — f{co,t)) + ^ wincostE{cj,Ci). 

Thus we can easily extract the cost of microbribery Mf from the cost of flow /. 

Our algorithm crucially depends on this correspondence between flows and microbriberies. (Also, in 
the proofs of Lemmas |3 . 141 and 13.171 that cover the case of an even number of voters we simply show how 
to modify the instances I{T) to handle ties, and we show correspondences between the new networks and 
microbriberies; the rest of these proofs is the same as here.) 

Note that for small values of T no flow of value F exists for I{T). The reason for this is that the edges 
coming into the sink t might not have enough capacity so as to hold a flow of value F. In such a situation 
it is impossible to guarantee that every candidate gets at most T points; there are too many Copeland".j.j^(jjjj^^[ 
points to distribute. 

Figure |4] gives our algorithm for constructive microbribery in CopelandjJj.jjjjQ|j^[. This algorithm runs in 
polynomial time since, as we have already mentioned, the min-cost-flow problem is solvable in polynomial 
time. 

Let us now prove that this algorithm is correct. We have presented above how a flow / of value F within 
the flow network /(r) (with <T < F) defines a microbribery. Based on this, it is clear that if our algorithm 
accepts then there is a microbribery of cost at most k that ensures p's victory. 

On the other hand, suppose now that there exists a microbribery of cost at most k that ensures p's victory 
in the election. We will show that our algorithm accepts in this case. 

Let M be a minimum-cost bribery (of cost at most k) that ensures p's victory. As pointed out above, M 
can be represented as a collection of pairs (c, ,cy) of distinct candidates for whom we flip the result of the 
head-to-head contest from c, winning to cj winning. The cost of M is 

^ wincostE{cj,Ci). 

{ci.Cj)eM 
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Since applying microbribery M ensures that p is a winner, we have that each candidate among ci , C2 , . . . , c,„ 
has at most as many Copelandj^j^jj^j^^j points as p does. Let E' be the election that results from E after 
applying microbribery M to E (i.e., after flipping the results of the contests specified by M in an optimal 
way, as given by wincostE)- Let T' be score'^,{p), p's CopelandjJ|.^yQ|^jjj score after implementing M. Clearly, 

o< r < ||c|| - 1. 

Consider instance I{T') and let /m be the flow that corresponds to the microbribery M. In this flow each 
edge of the form (s, c/) carries flow of its maximum capacity, icore" (c,), each edge of the form (c,, cy) carries 
one unit of flow exactly if e is listed in M and carries zero units of flow otherwise, and each edge of the form 
(ci,f) carries score's/lei) units of flow. It is easy to see that this is a legal flow. The cost of /m is 

floweost{fM) ~B ■ [F — T') + ^ wineostE{ej,ei). 

After applying M, p gets T' Copelandj^^y^i^j^j points that travel to the sink f via edge (co,f) with cost fl(co,?) = 
0, and all the remaining F — T' points travel via edges (c,,f), ; G {1,2, .. . ,m}, with cost a{ei,t) = B. The 
remaining part of floweost{fM) is the cost of the units of flow traveling through the edges (c, , c^) that directly 
correspond to the cost of microbribery M. 

Now consider some minimum-cost flow /min for I{T'). Since /m exists, a minimum-cost flow must exist 
as well. Clearly, we have 

floweost{fmm) <floweost{fM). 

Let T" be the number of units of flow that /min assigns to travel over the edge (co,f ), i.e., T" = /min(co,f)- 
The only edges with nonzero cost for sending flow through them are those in the set {(c,, Cj) | c,, e 
C AvsE{ci,ej) > 0}U{(c,-,f) | ; G {l,...,m}} and thus the cost of /mm can be expressed as (recall that 
vsE{ci,Cj) > implies i ^ j) 

floweost{fi-nm)=B-{F-T")+ fmmici,ej) -wineostEiej^ei). 

ci,Cj eCAvsE {cj.Cj)>0 

B > Y^i j i^jWineostE{ei,ej), for each c/,Cj G C such that vsE{ei,ej) > we have fmm{ci,Cj) G {0, 1}, and 
floweost{fynm) <floweost{fM), so it must hold that T" = T' and 

fmin (ci , ) • wineostE (c ^ , c/ ) < ^ wincostE (c j ,Ci). 

Cj .CjeCAvsE{cj.Cj)>0 (c,- ,Cj ) eM 

Thus flow /min Corresponds to a microbribery that guarantees p's victory and has cost at most as high as that 
of M. Since M was chosen to have minimum cost among all such microbriberies, flow /min corresponds to 
a microbribery of minimum cost and our algorithm correctly accepts within the for loop of Figure |4l at the 
very latest when in the for loop T is set to T\ □ 

We now turn to the algorithms showing that LluU and Copeland'', with irrational voters allowed, are 
vulnerable to constructive microbribery when the number of voters is even. In this case we need to take into 
account that it sometimes is more desirable to have some candidates tie each other in a head-to-head contest 
than to have one of them win the contest. 

Lemma 3.13 Let E = (C, V) be an election with candidate set C = {co,c\ , . . . , c„,} and with an even number 
of voters, specified via preference tables over C. If the election is conducted using Co^eXand^^^^^^^^^^^ then no 
minimum-cost microbribery that ensures victory for co involves either (a) flipping a result of a head-to-head 
contest between any two distinct candidates Ci,Cj G C— {cq\ from Cj winning to cj winning, or (b) changing 
a result of a head-to-head contest between any two distinct candidates in C— {cq} from a tie to one of them 
winning. 
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Proof. Our proof follows by way of contradiction. Let E = (C, V) be an election as specified in the lemma. 
For the sake of a contradiction suppose there is a minimum-cost microbribery M that makes cq win and that 
there are two distinct candidates, c,- and cj, in C — {cq} such that microbribery M involves switching the result 
of the head-to-head contest between these candidates from c, winning to Cj winning or from a tie to one of 
them winning. Consider the microbribery M' that is identical to M, except that it makes c, tie with cj in a 
head-to-head contest, either via an appropriate number of microbribes if c, and cj do not tie originally, or via 
leaving the corresponding preference-table entries untouched if they do tie initially. Clearly, this microbribery 
M' has a lower cost than M and it still ensures cq's victory. This is a contradiction. □ 

With Lemma [3.13l at hand, we can show that constructive microbribery is easy for Copelandj|.j.^jjjjj^^[ for 
the case of an even number of voters. 

Lemma 3.14 There is a polynomial-time algorithm that solves the constructive microbribery problem for 
Copeland[[.|.^jji^i^^[ elections with an even number of voters (in the nonunique-winner model). 

Proof. Our input is election E = {C,V), where C = {co,ci ,c,„}, p = cq, and V is a collection of an 
even number of voters, each specified via a preference table over C. Our algorithm is essentially the same 
as that used in the proof of Lemma 13.111 except that instead of using instances I{T) we now use instances 
J{T) defined below. In this proof we show how to construct these instances and how they correspond to 
microbriberies within E. The proof of Lemma D . 1 1 1 shows how to use such a correspondence to solve the 
microbribery problem at hand. 

Let r be a nonnegative integer, <T < \\C\\ — 1. Instance J{T) is somewhat different from the instance 
I{T) used in the proof of Lemma l3.11l In particular, due to Lemma [3.13l (and the fact that our goal is to make 
Co a winner), we model only microbriberies that have the following effects on our election: 

1. For any two distinct candidates c,, cj in C — {cq}, the result of the head-to-head contest between c, and 
Cj may possibly turn into a tie. 

2. For each candidate c, in C — {cq}, the result of a head-to-head contest between cq and c, may possibly 
turn into either a tie (from c, defeating cq) or into cq defeating c, (from either a tie or from c, defeating 
Co)- 

Our instance J{T) contains special nodes, namely the elements of the sets C' and C" below, to handle 
these possible interactions. We define 

C' = {cij \ i J G {1,2, ... ,m} AvsE{ci,Cj) > 0} and 
C" = {c,o I /e {l,2,...,m}Avs£(c/,co) >0}. 

For each possible threshold T, define 7(7) to be the flow network with node setK ~CL)C'L)C"U{s,t}, where 
s is the source, t is the sink, and the edge capacities and costs are as stated in Figure |5] (As before, we set B 
to be a number that is greater than the cost of any possible microbribery within E, e.g., B = ||y || • ||C|p + I.) 
The target flow value is 

VGA- 
Instance J{T) is fairly complicated but it in fact does closely follow the instance of microbribery that we 
have at hand. As in the proof of Lemma |3.11| the units of flow that travel through the network are interpreted 
as Copeland2.|.^jjjj|^jj[ points, and flows are interpreted as specifying microbriberies. 

Example 3.15 For illustration, we add a fourth voter to the election given in Example \3.12\ call the resulting 
election E. Again, all voters happen to be rational, and their preference tables can easily be derived from 
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Edge 


Parameters 


where c, G C 


c(e) = score\{ci) 
a{e) = 


e = {ci.Cij), 

where c;,Cj G C — {cq} and vs£(c;,Cj) > 


c{e) = 1 

fl(e) = tiecostE{cj,Ci) 


e= (c,-,f), 

where c, G C — {cq} 


c{e) ~ T 
a{e) = B 


e = (c,;,f), 

where c;,Cj G C — {cq} and vs£(c/,c^) > 


c{e) = 1 
a{e) = B 


e = (c,-,c,o), 

where c,- G C — {cq} and vs£(c;,co) > 


c{e) = 1 

a{e) = tiecostE{co,Ci) 


e = (c,o,co), 

where Ci^C— {cq} and vs£(c!,co) > 


c{e) = 1 

a{e) = wincostE(co,Ci) — tiecostE{co,Ci) 


e = («,c,-o), 

where c,- G C — {cq} and vs£(c,-,co) = 


c{e) = 1 
a{e) = 


e = (c,-o,f)' 

where c,- G C — {cq} and vs£(q,co) > 


c(e) = 1 
a{e) = B 


e = (co,f) 


c{e) = T 
a(e) = 


every other edge e 


c(e) =0 
fl(e) = 



Figure 5: Edge capacities and costs for min-cost-flow instance J{T), buih from election E. 



Voter 1 : cq > ci > C2 > C3 

Voter 2 : C3 > C2 > ci > cq 

Voter 3 : C2 > cq > C3 > ci 

Voter 4 : C2 > C3 > cq > ci 
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Figure 6: A sample election E for Example l3.15l in the proof of Lemma D. 141 

the preference orders shown in Figure^ which also provides the corresponding values of y%E(ci,Ci) for 
each pair of candidates. We now have score^^ico) = score^^{cT,) — 1, icore^(ci) = 0, and score\{c2) = 3. 
Suppose we are allowed to do two microbribes and so have k — 2. Two microbribes that change, say, the 
fourth voter's preference table to him or her now ranking cq above of both C2 and C3 yields an election E' 
with score'^i{cQ) = icore^,(c2) =2, score^,{c^) ~ 1, and score^,{ci) =0, thus reaching our goal of making 
Cq a winner of the election. It is easy to see that this is a cheapest among all possible successful microbribes. 
Finally, note that in this example we have B = 65. 

For any threshold T with < T < 3, the flow network J{T) corresponding to this instance {E,CQ,k) of 
the constructive microbribery problem is shown in Figure^ and we have a target flow value ofF — 6. Every 
edge e in this flow network is labeled by the pair (c(e),fl(e)) of numbers that give the capacity and the cost 
of edge e, respectively. 

To continue the proof of Lemma 13.141 let us now describe a bit more precisely how we interpret our 
flow network J{T). In particular, we will argue that each flow / of value F that travels through the network 
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Figure 7: Flow network7(r) corresponding to the instance {E,CQ,k) of Example l3.15l 



J{T) corresponds to a microbribery within E that gives each candidate c, G C exactly f{ci,t) Copelandj^^^jj^^^^j 
points: 

1 . For each c, e C, the units of flow that enter c; from s correspond to the number of c, 's Copeland^^^^j^j,^ 
points in E, prior to any microbribery. 

2. For each c, G C, the units of flow that go directly from c; to t correspond to the number of c,'s 
Copeland2.|.^yQi^jjj points after a microbribery as specified by the flow. 

3. For each pair of distinct candidates c, , G C — {cq} such that c, defeats cj in their head-to-head contest 
in E, we have an edge e = {ci,Cij) with capacity one and cost tiecostE{cj,Ci). A unit of flow that 
travels through e corresponds to a microbribe that makes c, tie with cj: Cj loses the point, we pay 
tiecostE{cj,Ci), and then the unit of flow goes directly to f. (From Lemma D.13| we know that we do 
not need to handle any other possible interactions between c, and Cj in their head-to-head contest.) 

4. For each candidate c, G C — {cq} such that c,- defeats cq in a head-to-head contest, we need to allow for 
the possibility that a microbribery causes cq to either tie with c, or to defeat c,. Fix an arbitrary such c,-. 
A unit of flow that travels directly from c, to c,o and then directly to t corresponds to a microbribery 
after which cq ties with cf. ct loses the point but cq does not receive it and the cost of the flow increases 

by tiecostE{cQ,Ci). 

On the other hand, if that unit of flow travels from c, to c,o and then directly to cq, then this corresponds 
to a microbribery after which cq defeats c,. The point travels from c, to cq and the cost of the flow 
increases by w/«cosf£(co,c,). 

If there is no flow entering node c,o then this means that our microbribery does not change the result of 
a head-to-head contest between cq and c,. 

5. For each candidate c,- G C — {cq} such that c, ties with cq in a head-to-head contest before any micro- 
bribery is attempted, we need to allow for cq defeating c, after the microbribery. Fix any such c,-. A 
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unit of flow that travels directly from s to c,o and then directly to cq corresponds to a microbribery 
after which cq defeats c,- in a head-to-head contest: cq gets an additional point and the cost of the flow 
increases by wincostE{co,Ci) — tiecostE{co,Ci) ~ wincostE{co,Ci). 

On the other hand, a unit of flow that travels from s directly to c,o and then directly to t corresponds to 
a microbribery that does not change the result of a head-to-head contest between cq and c,. 

Based on these comments, we can see the natural correspondence between flows in J{T) and micro- 
briberies. In particular, each flow / of value F that travels through the network J{T) corresponds to a 
microbribery within E that gives each candidate c, G C exactly f{ci,t) CopelandJJ.j.^jjjji^^j points. 

Now let Mf be a microbribery defined by flow / of value F within J{T), <T < \\C\\ — 1, assuming 
that one exists. Let cost{Mf) be the minimum cost of implementing microbribery My. A close inspection of 
instance J{T) shows that the cost of such a flow / is 

flowcost{f) ^B {F- /(cq, f )) + cost{Mf) . 

Because of the above equation, the fact that all units of flow that are not accounted for as cq's points (i.e., 
the units of flow that do not travel through the edge (co,f)) impose cost B on the flow, and via arguments 
analogous to those in Lemma l3.11l the following holds: If for a given /(r),0<r<j|C|| — 1, there exists a 
flow of value F then a minimum-cost flow fmin of value F corresponds to a minimum-cost microbribery that 
ensures that cq receives T points and each other candidate receives at most T points. (Intuitively, the reason 
for this is that B is so large that in a minimum-cost flow one would always send as few units of flow through 
edges of cost B, but each node c, can receive (or, equivalently, send through some path to the sink) at most 
T points.) Thus, to solve the constructive microbribery problem for Copelandj^^^jj^jj^j elections with an even 
number of voters it is enough to run the algorithm from Figure IH using the instances J{T) instead of I{T) 
and using the new value of F. □ 

We now show that Llull, with irrational voters allowed, is vulnerable to constructive microbribery when 
there are an even number of voters. The following lemma reduces the set of microbriberies we need to model 
in this case. 

Lemma 3.16 Let E ~ (C,y) be an election with candidate set C = {co,ci, . . . ,Cm} and with an even number 
of voters, specified via preference tables over C. If the election is conducted using Copelandj^^jj^^j^^j then 
no minimum-cost microbribery that ensures victory for cq involves obtaining a tie in a head-to-head contest 
between any two distinct candidates in C — {cq}. 

Proof. Our proof is again by way of contradiction. Let E = (C, V) be an election as specified in the lemma. 
Suppose there is a minimum-cost microbribery that ensures cq's victory and that involves obtaining a tie 
in a head-to-head contest between two distinct candidates in C— {cq}, say c, and Cj. That is, before this 
microbribery we have that either c, defeats cj or Cj defeats c,- in their head-to-head contest but afterward they 
are tied. Clearly, a microbribery that is identical to this one except that does not change the result of the head- 
to-head contest between c,- and Cj (i.e., one that does not microbribe any voters to flip their preference-table 
entries regarding c, versus Cj) has a smaller cost and stUl ensures cq's victory. This is a contradiction. □ 

Lemma 3.17 There is a polynomial-time algorithm that solves the constructive microbribery problem for 
Copeland['j.j.^jjjjij^[ elections with an even number of voters (in the nonunique-winner model). 

Proof. We give a polynomial-time algorithm for constructive microbribery in Copelandj^^jj^^j^^j elec- 
tions with an even number of voters. Our input is a budget k <E N and an election E — {C,V), where 
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C ~ {co,ci , . . . ,c„,}, p = Co, and V contains an even number of voters specified via their preference tables 
over C. Our goal is to ensure p's victory via at most k microbribes. 

We use essentially the algorithm from the proof of Lemma [3.11l except that instead of using instances 
I{T) we now employ instances L{T) that are designed to handle tie issues as appropriate for CopelandJ^^^yQi^j^j. 
Lemma [3. 161 tells us that our min-cost-flow instances L{T) do not need to model microbriberies that incur 
ties between pairs of distinct candidates in C — {cq}. We also don't need to model microbriberies that change 
the outcome of the head-to-head contest between cq and any candidate in C — {cq} from cq winning to cq 
not winning or from a tie to cq losing. However, we do need to model possible microbribery-induced ties 
between cq and each c,- in C — {co}. 

Define Z? to be a number that is greater than the cost of any possible microbribery within E (e.g., B = 
ll^ll'll^lP+l will do). Further, define the following three sets of nodes: 

C' ^ [c'i I Ci e C}, 

C" = {cij I /< j Aci,Cj eC /\vsE{ci,Cj) ^0}, and 
C'" = {co,- I a e CAvs£(c„co) > 0}. 

Our flow network L(r) has the node set K ^CUC' UC" UC'" U {s,t}, where s is the source, t is the sink, and 
the capacities and costs of edges are defined in Figure[8] Each instance L{T) asks for a minimum-cost flow 
of value 

c^eC 

Example 3.18 Consider the sample election E from Example \3.15\ asain. which is given in Figure^ Since we 
are using Copelandjj^^jjjjj^^j now, we have the following scores: score\-{cQ) ~ score\{c{) = 2, score\-{c\) = 0, 
and score^^(c2) = 3. Let k ^ \. We can reach our goal of making co win via one microbribe that switches 
the preference table of say, the third voter to now prefer co over C2- This microbribe gives cq one more 
Copelandj'j.|.^jjijjjji] point (i.e., score^^,{co) — 3 in the modified election E'), but it doesn't change the score of 
any of the other candidates within CopelandJj.j.jjjjQj|^(. Again, we have B — 65. 

For any threshold T with < T < 3, the flow network L{T) corresponding to this instance {E,CQ,k) of 
the constructive microbribery problem is shown in Figure^ We now have a target flow value of F ~1, and 
every edge e in this flow network is labeled by the pair (c(e),fl(e)) of numbers that give the capacity and the 
cost of edge e, respectively. 

To continue the proof of Lemma [3. 171 note that a flow / of value F within L{T), < T < \\C\\ — 1, 
corresponds to a microbribery Mf within election E that leaves each candidate c,- with exactly fict^c'-) 
Copeland['j.|.^jjQi,g[ points. As in the proofs of Lemmas 13.111 and 13.141 points traveling through the network 
L{T) are here interpreted as Copelandj'j^.^jjQ|^^[ points and flows are interpreted as specifying microbriberies. 
More specifically, we interpret the units of flow traveling through L{T) as follows: 

1. For each c, G C, the units of flow that enter c, from s are interpreted as the Copelandj'j.|.^yjj|^^[ points that 
c, has before any microbribery is attempted. 

2. For each c, G C, the units of flow that travel directly from c, to cj are interpreted as the CopelandJj.j.^jjjjjj^[ 
points that c,- has after the microbribery defined by / has been performed. 

3. If a candidate c, G C — {co} originally defeats co but our flow models a microbribery in which co and c, 
end up tied in their head-to-head contest, then we have a single CopelandJj^.^jjjj|^j^[ point that travels from 
Ci to c'^, then to cq through co,, at cost tiecostE{co,Ci), and then to Cq. This way the same unit of flow is 
accounted both for the score of cq and for the score of c,-. Note that such a unit of flow then travels to t 
through edge (co,f ) at zero cost. 
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Edge 


Parameters 


e = (i,c,-), 
where c, G C 


c{e) = score^^{ci) 
a{e) = 


e= (c/,C;), 

where c,-,c; G C — {cq} and vsE{ci,Cj) > 


c{e) = 1 

a{e) = wincostE{cj,Ci) 


e = (c/,c,;), 

where / < j, Ci,Cj G C and vs£(c;,Cj) = 


c(e) = 1 

a{e) ~ wincostE(c j,Ci) 


e^{cj,Cij), 

where / < j, Ci,Cj G C and vs£(c;,Cj) = 


c{e) = 1 

a{e) = wincostE{ci,Cj) 


where ; < j, Ci,Cj G C and vs£(c,',Cj) = 


c(e) = 1 
a{e) = B 


e = (c,-,co;), 

where c,- G C — {cq} and vs£(c;,co) > 


c{e) = 1 

a{e) = wincost{co,Ci) 


e = {c'i,coi), 

where c,- G C — {cq} and vs£(c,,co) > 


c(e) = 1 

a{e) = tiecost{cQ,Ci) 


e = (co;,co), 

where Ci^C— {cq} and vs£(c,',co) > 


c(e) = 1 
a{e) = 


^' = {ci,c\), 
where c, G C 


c(e) — T 
a{e) ~ 


where c,- G C — {cq} 


c(e) ~ r 
a(e) = B 




c(e) = r 
a{e) = 


every other edge e 


c(e) = 
a{e) = 



Figure 8: Edge capacities and costs for min-cost-flow instance L{T), built from election E. 

4. For any two distinct candidates c, and cj such that Ci,Cj G C — {cq} where c, defeats cj in a head-to- 
head contest in E, a unit of flow traveling from c, to cj corresponds to a microbribery that flips the 
result of their head-to-head contest. Thus cj receives the Copeland^^jj^^j^^ point and the cost of the flow 
increases by wincostE{cj,Ci). 

5. For any c, G C — {cq} where c, defeats co in a head-to-head contest in E, a unit of flow traveling from 
c, to Co via Co, corresponds to a microbribery that flips the result of their head-to-head contest. Thus 
c, receives the Copelandj'j.j.,jjjQ|,jj] point and the cost of the flow increases by w/«coif£(co,c,). Note that 
since the edge (co, ,co) has capacity one we ensure that at most one unit of flow travels from c, to co 
(either on a path c,-,co,,co (modeling a microbribery that flips the result of the head-to-head contest 
between c, and cq to co winning) or on a path c,,C;,co,,co (modeling a microbribery that enforces a tie 
between cq and c,)). 

6. For each Ci,Cj G C, we have to take into account the possibility that c, and cj are tied in their head-to- 
head contest within E, but via microbribery we want to change the result of this contest. Let c, ,cy G C 
be two such candidates and let / < j. Here, a unit of flow traveling from c, to Cij (or, analogously, from 
Cj to Cij) is interpreted as a microbribery that ensures c/s (c,'s) victory in the head-to-head contest. 
Since c,- and Cj were already tied, Cj (c,) already has his or her point for the victory and c, (cj) gets rid 
of his or her point through the node cij . The cost of the flow increases by wincostE {cj,Ci) (respectively. 
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Figure 9: Flow network L{T) corresponding to the instance {E,co,k) of Example l3.18l 



by wincostE{ci,Cj)). Also, we point out that via the introduction of node Cij we ensure that only one 
of c, and Cj, let us call him or her c^, can lose a point by sending it from q to c,j and then to f ; the 
capacity of edge (c,y,f) is only one. 

Through the above description, we can see the natural correspondence between flows in L{T) and micro- 
briberies. In particular, each flow / of value F corresponds to a microbribery Mf within E that gives each 
candidate c,- exactly f{ci,c'f) points. 

Let us now analyze the cost of /. It is easy to see that each unit of flow that is not accounted for as a 
Copelandjj.j.,jyQi^^] point of cq reaches the sink t via an edge of cost B. Also, the only other edges through which 
units of flow travel at nonzero cost are those that define the microbribery M^. Thus the cost of our flow / can 
be expressed as 

flowcostif) =B{F- f{co ,c'o))+ cost{Mf). 

Fix T such that <T < \\C\\ — 1. Given the above properties of L{T) and by the arguments presented 
in the proof of Lemma l3.11l if a flow of value F exists within the flow network of instance L{T), then each 
minimum-cost flow in L{T) corresponds to a microbribery that ensures that cq has exactly T Copeland^^^y^jj^^j 
points and every other candidate has at most T Copeland^^jj^^j^^j points. Thus if there exists a value T' such 
that 

1. there is a flow of value F in L{T') and 

2. the cost of a minimum-cost flow / of value F in L{T') is K, 

then there is a microbribery of cost K — B ■ {F — T') that ensures co's victory. 
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On the other hand, via Lemma D. 161 and our correspondence between flows for L{T) and microbriberies 
in E, there is a value T" such that a minimum-cost flow in L{T") corresponds to a minimum-cost micro- 
bribery that ensures p's victory. Thus the algorithm from Figure |4] used with the instances L{T) instead 
of I{T) and with our new value of F, solves in polynomial time the constructive microbribery problem for 
Copeland^^jjQijjjj with an even number of voters. □ 

Together, Theorem 13. 71 and Lemmas |3. Ill 13.141 and l3.17l show that, in particular, both Copeland^j^jj^j^^jj 
and Copelandj^^jjjjj^^i are vulnerable to microbribery, both in the constructive and the destructive settings. It 
is interesting to note that all our microbribery proofs above would work just as well if we considered a slight 
twist on the definition of the microbribery problem, namely, if instead of saying that each flip in a voter's 
preference table has unit cost we would allow each voter to have a possibly different price for flipping each 
separate entry in his or her preference table. This change would affect only the computing of the values of 
the functions wincost and tiecost. (Technically, we would also have to modify Lemmas |3. 13| and |3. 161 which 
in our unit-cost setting say that an optimal microbribery never involves certain specified pairs of candidates, 
whereas in the priced setting we would need to rephrase them to state that there exist optimal microbriberies 
that do not involve those specified pairs of candidates.) 

An interesting direction for further study of the complexity of bribery within Copeland" systems is to 
consider a version of the microbribery problem for the case of rational voters. There, one would pay unit cost 
for a switch of two adjacent candidates on a given voter's preference list. 

For Copelandj^^jjjjjj^j, we would also like to know the complexity of constructive microbribery when a is 
a rational number strictly between and 1 . Our network-flow-based approach does not seem to generalize 
easily to values of a strictly between and 1 (when the number of voters is even) because in a flow network 
it is hard to "split" a unit of flow in a tie. A promising approach would be to have several units of flow model 
one Copelandj^^i^jijj^^j point (e.g., for the case of a = j we could try to use two units of flow to model a single 
Copeland"'^ point), but then it seems very difficult (if not impossible) to find edge costs that appropriately 
model the microbribery. (It is possible to do so in a very restricted setting, namely where a = j and there are 
exactly two voters that can be bribed.) Also, the results regarding hardness of manipulation of Faliszewski, 
Hemaspaandra, and Schnoor IIFHS08I suggest that microbribery for a strictly between and 1 might be 
NP-hard. However, again, it is nontrivial to translate their reduction to the world of microbribery. 

On a related note. Kern and Paulusma I KPOIJ have shown that the following problem, which they call 
SC(0,a, 1), is NP-complete. Let a be a rational number such that < a < 1 and a ^ We are given an 
undirected graph G = {V{G),E{G)), where each vertex u G V{G) is assigned a rational value c„ of the form 
/ + ja, for nonnegative integers ; and j. The question, which we have rephrased to state in terms of (a variant 
of) our notion of Copeland", is whether it is possible to (possibly partially) orient the edges of G such that 
for each vertex u E V{G) it holds that lis Copeland" score is at most c„. Here, by "Copeland" score of a 
vertex m" we mean, as is natural, the number of vertices u "defeats" (i.e., the number of vertices v such that 
there is a directed edge from u to v) plus a times the number of vertices that u "ties" with (i.e., the number of 
vertices such that there is an undirected edge between u and v). 

Problem SC(0,a, 1) is very closely related to our microbribery problem. However, we do not see an 
immediate reduction from SC(0, a, 1) to microbribery. A natural approach would be to embed graph G into 
an election (in the sense that will be explored in Section |4|i in such a way that our preferred candidate p can 
become a winner, via a microbribery, if and only if it is possible to orient the edges of G in a way respecting 
the constraints defined by the values c„ (for each u in V{G)). We would, of course, have to set the budget 
of our microbribery high enough to allow modifying each of the edges in G and none of the edges outside 
of G. However, this is difficult. The proof of Kern and Paulusma uses values c„ that can be implemented 
only via using tied head-to-head contests. The agent performing microbribery could, potentially, affect those 
head-to-head contests, thus spoiling our reduction. 
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4 Control 



In this section we focus on the complexity of control in Copeland" elections. In control problems we are 
trying to ensure that our preferred candidate p is a winner (or, in the destructive case, that our despised 
candidate is not a winner) of a given election via affecting this election's structure (namely, via adding, 
deleting, or partitioning either candidates or voters). In contrast with bribery problems, in control problems 
we are never allowed to change any of the votes and, consequently, the issues that we encounter and the proof 
techniques we use are quite different from those presented in the previous section. For the same reason as 
previously for each standard type of control a resistance result in the rational-voters case implies an analogous 
resistance result in the irrational-voters case, and a vulnerability result in the irrational-voters case implies an 
analogous vulnerability result in the rational-voters case. 

The literature regarding the complexity of control problems is not large. To the best of our knowledge, the 
only election systems for which a comprehensive analysis has been conducted previously are plurality, Con- 
dorcet, and (variants of) approval voting (see IIBTT92IIHHR07allHHR07bllBU08IIENR08bl : see also IIPRZ07II 
for some results on (variants of) approval voting, single nontransferable vote, and cumulative voting with 
respect to constructive control via adding voters). Among plurality, Condorcet, and (the standard variant of) 
approval voting, plurality appears to be the least vulnerable to control and so it is natural to compare our 
new results with those for plurality. However, we mention in passing that Hemaspaandra, Hemaspaandra, 
and Rothe |HHR07b| show how to construct hybrid election systems that are resistant to all standard types 
of control (including both AC and ACu; AC is not discussed or proven in OHHROTbll — the "AC" there is our 
"ACu" — but we mention that the techniques clearly can handle it without any problem). (It should also be 
noted that these hybrid systems were not designed as "natural" systems to be applied in real-world elections 
but rather their purpose was to prove a certain impossibility theorem impossible.) 

Our main result in this section is Theorem l4. 1 1 

Theorem 4.1 Let a be a rational number with < a < 1. Copeland" elections are resistant and vulnerable 
to control Types as indicated in Table Q] in both the nonunique -winner model and the unique-winner model, 
for both the rational and the irrational voter model. 

In particular, we will prove in this section that the notion widely referred to in the literature simply as 
"Copeland elections," which we here for clarity call Copeland"^, possesses all ten of our basic types (see 
Table [TJ of constructive resistance (and in addition, even has constructive ACu resistance). And we will 
establish that the other notion that in the literature is occasionally referred to as "Copeland elections," namely 
Copeland", as well as LluU elections, which are here denoted by Copeland^ both possess all ten of our basic 
types of constructive resistance. However, we will show that Copeland'' and Copeland' are vulnerable to an 
eleventh type of constructive control, the incongruous but historically resonant notion of constructive control 
by adding an unlimited number of candidates (i.e., CCACu). 

Note that Copeland"^ has a higher number of constructive resistances, by three, than even plurality, which 
was before this paper the reigning champ among natural election systems with a polynomial-time winner- 
determination procedure. (Although the results regarding plurality in Table[T]are stated for the unique-winner 
version of control, for all the table's Copeland" cases, < a < 1, our results hold both in the cases of unique 
winners and of nonunique winners, so that regardless of which of the two winner models one finds more 
natural, one will know what holds in that model.) Admittedly, plurality does perform better with respect to 
destructive candidate control problems, but still our study of Copeland" makes significant steps forward in 
the quest for a fully control-resistant natural election system with an easy winner problem. 

Among the systems with a polynomial-time winner problem, Copeland"^ — and indeed all Copeland", 
< a < 1 — have the most resistances currently known for any natural election system whose voters vote by 
giving preference lists. We mention that after our work, Erdelyi, Nowak, and Rothe fENR08b'| have shown 
that a variant of approval voting proposed by Brams and Sanver IIBS06I — a certain rather subtle election 
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Table 1 : Comparison of control results for Copeland" elections, where a with < a < 1 is a rational number, 
and for plurality -rule elections. R means resistance to a particular control type and V means vulnerability. The 
results regarding plurality are due to Bartholdi, Tovey, and Trick IIBTT92II and Hemaspaandra, Hemaspaandra, 
and Rothe |HHR07a|. (Note that CCAC and DCAC resistance results for plurality, not handled explicitly 
in ||BTT92ilHHR07aJ , follow immediately from the respective CCACu and DCAd, results.) 



system with a richer voter preference type (each voter specifies both a permutation and a set) that combines 
approval with preference-based voting — has nineteen (out of a possible twenty-two) control resistances. 

This section is organized as follows. The next two sections are devoted to proving Theorem 14. II and 
Section 143] considers the case of control in elections with a bounded number of candidates or voters. In 
particular. Section 14.11 focuses on the upper part of Table [T] and studies control problems that affect the 
candidate structure. Section l4~2l is devoted to voter control and covers the lower part of Table [T] Finally, in 
Section |43] we study the fixed-parameter complexity of control problems. In particular, we take the role of 
someone who tries to solve in-general-resistant control problems and we devise some efficient algorithms for 
the case where the number of candidates or the number of voters is bounded. 

All our resistance results regarding candidate control follow via reductions from vertex cover and all our 
vulnerability results follow via greedy algorithms. Our resistance results for the case of control by modifying 
voter structure follow from reductions from the X3C problem. 

4.1 Candidate Control 

We start our discussion of candidate control for Copeland" with our results on destructive control. It is some- 
what disappointing that for each rational a, < a < 1, Copeland" is vulnerable to each type of destructive 
candidate control. On the positive side, our vulnerability proofs follow via natural greedy algorithms and will 
allow us to smoothly get into the spirit of candidate-control problems. 

4.1.1 Destructive Candidate Control 

The results for destructive control by adding and deleting candidates use the following observation. 
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Observation 4.2 Let (C, V) be an election, and let a be a rational number such that < o; < 1. For every 
candidate c CzC it holds that 

score'^^y^ic)^ E ^^°''^({c,d}y)i'^)- 

d£C-{c} 

Theorem 4.3 For each rational number a with < a < 1, Copeland" is vulnerable to destructive control 
via adding candidates (both limited and unlimited, i.e., DCAC and DCACu), in both the nonunique-winner 
model and the unique-winner model, for both the rational and the irrational voter model. 

Proof. Our input is a set C of candidates, a set D of spoiler candidates, a collection V of voters with 
preferences (either preference lists or preference tables) over C U D, a candidate p € C, and a nonnegative 
integer k (for the unlimited version of the problem we let k = \\D\\). We ask whether there is a subset D' of 
D such that < A: and p is not a winner (is not a unique winner) of Copeland" election {CUD',V). 
Note that if ^ = 0, this amounts to determining whether p is not a winner (is not a unique winner) of election 
E, which can easily be done in polynomial time. 

For the remainder of this proof we will assume that ^ > 0. Let c be any candidate in (CUD) — {p}. We 
define a{c) to be the maximum value of the expression 

^coreJ'cuD',!') (c) - scoref(.,j^, [p) 

under the conditions that D' C D, c E CUD', and < k. From Observation l4.2l it follows that a{c) is the 
maximum value of 

*co'-e"cu{c},y) (c) - ^corej^cujc}.!/) if) + L ('''oref^c.d}.v) i^) - ^coref^^^^^y^ (p)) 

d€D'-{c} 

under the conditions thatD' C D, c e CUD', and ||D'|| < k. 

Clearly, p can be prevented from being a winner (a unique winner) if and only if there exists a candidate 
c e (CUD) - {p} such that a(c) > (such that a{c) > 0). 

Given a candidate c € {CUD) — {p}, it is easy to construct in polynomial time a set D' C D, j|D'|| < k, 
that yields the value a{c). We start with D' = 0. If c G D, we add c to D'. Then we add those candidates 
c/ G D — D' to D' such that icore" ^. (c) — icore" (p) is positive, starting with those for whom this 
value is highest, until ||D'|| = A; or no more such candidates exist. □ 

Theorem 4.4 For each rational number a with < a < 1, Copeland" is vulnerable to destructive control 
via deleting candidates ( DCDC), in both the nonunique-winner model and the unique-winner model, for both 
the rational and the irrational voter model. 

Proof. Our approach is similar to that of the previous theorem. We are given an election E = (C,y), a 
candidate p EC, and a nonnegative integer k. Our goal is to check whether p can be prevented from being a 
winner (a unique winner) via deleting at most k candidates in C — {/?}. 

Let c be any candidate in C — {p}. Define d{c) to be the maximum value of the expression 

*core"c-D,v) (c) " ^core^c-D,v) (p) 

under the conditions that DCC, {p,c} HD = 0, and ||D|[ < k. 

From Ob servation 14 . 2 1 it follows that d{c) is the maximum value of 

scorefcyJc)~scorefcyJp)+Y, (*core?r o ^,j(/7) - ,9core^. ^,)(c)) 
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under the conditions that DQC, {p,c) CiD = 0, and < k. 

Clearly, p can be prevented from being a winner (a unique winner) if and only if there exists a candidate 
c eC - {p} such that <i(c) > (such that <i(c) > 0). 

Given a candidate c e C — {p}, it is easy to construct in polynomial time a set D, \\D\\ < k, that yields 
the value d{c). Simply let D consist of as many as possible but at most k candidates d ^ {c,p} such that 
score" p y-^ (p) — score"^^ (c) is positive, starting with those for whom this value is highest. □ 

Destructive control via partitioning of candidates (with or without run-off) is also easy. 

Theorem 4.5 For each rational number a with < oc < 1, Copeland" is vulnerable to destructive control via 
partitioning of candidates and via partitioning of candidates with run-off (in both the TP and TE model, i.e., 
DCPC-TP, DCPC-TE, DCRPC-TP, and DCRPC-TE), in both the nonunique-winner model and the unique- 
winner model, for both the rational and the irrational voter model. 

Proof. It is easy to see that in the TP model, p can be prevented from being a winner via partitioning of 
candidates (with or without run-off) if and only if there is a set C' C C such that p e C' and p is not a winner of 
(C', y). It follows that p can be prevented from being a winner if and only if p can be prevented from being a 
winner by deleting at most ||C|| — 1 candidates, which can be determined in polynomial time by Theorem |4.4| 

For the TE model, it is easy to see that if there is a set C' C C such that p E C' and p is not a unique 
winner of {C',V) then p can be prevented from being a unique winner via partitioning of candidates (with or 
without run-off). One simply partitions the candidates into C' and C ~C' and thus p fails to advance to the 
final stage. On the other hand, if p can be prevented from being a winner (a unique winner) via partitioning 
of candidates (with or without run-off) in the TE model, then there exists a set C' C C such that p eC and 
p is not a unique winner of (C',y). This is so because then either p does not advance to the final stage (and 
this means that p is not a unique winner of his or her first-stage election) or p is not a winner (not a unique 
winner) of the final stage (note that not being a winner implies not being a unique winner). 

Thus, p can be prevented from being a winner (a unique winner) via partitioning of candidates (with or 
without run-off) in the TE model if and only if there is a set C' C C such that p e C' and p is not a unique 
winner of (C', V). Clearly, such a set exists if and only if p can be prevented from being a unique winner via 
deleting at most ||C|| — 1 candidates, which by Theorem l4.4l can be tested in polynomial time. 

It remains to show that Copeland" is vulnerable to destructive control via partitioning of candidates (with 
or without run-off), in both the rational and the irrational voter model, in the unique-winner model with 
the TP tie-handling rule. In the argument below we focus on the DCRPC-TP case but it is easy to see that 
essentially the same reasoning works for DCPC-TP. 

First we determine whether p can be precluded from being a winner in our current control scenario. This 
can be done in polynomial time as explained above. If p can be precluded from being a winner, p can certainly 
be precluded from being a unique winner, and we are done. For the remainder of the proof, suppose that p 
cannot be precluded from being a winner in our current control scenario, i.e., for every set D C C such that 
p E D, p is a winner of (£>, V). Let 

D\ = {c eC — {p} I p defeats c in a head-to-head contest} 

and let D2 = D {D\ U {p}). Note that for all c E D2, p ties c in a head-to-head contest, since otherwise 
p would not be a winner of {{c,p},V). If D2 ~ 0, then p is a Condorcet winner and no partition (with or 
without run-off) can prevent p from being a unique winner |HHR07a|. For the remainder of the proof, we 
assume that D2 ^ 0. We will show that p can be precluded from being a unique winner in our current control 
scenario. 

If a < 1, we let the first subelection be {Di U {p},V). Note that p is the unique winner of this subelection. 
The final stage of the election involves p and one or more candidates from D2. Note that every pair of 
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candidates in Z)2 U {/?} is tied in a head-to-head election (since if c would defeat li in a head-to-head election, 
c would be the unique winner of {{c,d,p},V), which contradicts the assumption that p is a winner of every 
subelection it participates in). It follows that all candidates that participate in the final stage of the election 
are winners, and so p is not a unique winner. 

Finally, consider the case that a ~ I. Then score"^ (p) = ||C|| — 1 . If there is a candidate d £C — {p} 
such that score'^^y^{d) = ||C|| — 1, then d will always (i.e., in every subelection containing d) be a winner, 
and thus p will not be a unique winner of the final stage of the election, regardless of which partition of C was 
chosen. Now suppose that score'^^y^^{d) < \\C\\ — 1 for all c/ G C — {p}. Then score^^y^{d) < \\C\\ —2 for 
all c/ £ C — {p}. Let c be a candidate in D2 and let the first subelection be (C— {c},y). Let C' be the set of 
winners of (C— {c},y). Since score"^_^^,^ (p) = ||C|| — 2, it holds that p £C' and for every d gC' — {p}, 
icore^_l^,j y^{d) = ||C|| — 2. Since score'^^y^{d) < \\C\\ — 2, it follows that c defeats li in a head-to-head 
election. The final stage of the election involves candidates C' U {c}. Note that score^,^|^j y^ (c) — ||C'||, and 
thus c is a winner of the election, and we have precluded p from being a unique winner □ 

The above vulnerability results for the case of destructive candidate control should be contrasted with the 
essentially perfect resistance to constructive candidate control (with the exception of constructive control via 
adding an unlimited number of candidates for Copeland" with a £ {0,1 }) that will be shown in Sec tion l4. 1.31 
But first, in Section !?. 1.21 we will provide some technical prerequisites. 

4.1.2 Constructing Instances of Elections 

Many of our proofs in the next section require constructing fairly involved instances of Copeland" elections. 
In this section we provide several lemmas and observations that simplify building such instances. 

We first note that each election E = {C,V) induces a directed graph G{E) whose vertices are £"s can- 
didates and whose edges correspond to the results of the head-to- head contests in E. That is, for each two 
distinct vertices of G{E) (i.e., for each two distinct candidates), a and b, there is an edge from a to if and 
only if a defeats b in their head-to-head contest (i.e., if and only if vs£(fl,fe) > 0). Clearly, G{E) does not 
depend on the value of a. The following fundamental result is due to McGarvey. This result allows us to 
basically identify elections with their election graphs in the proofs of resistance for candidate control. 

Lemma 4.6 ( l|McG53l ) There is a polynomial-time algorithm that given as input an antisymmetric directed 
graph G outputs an election E such that G ~ G{E). 

Proof. For the sake of completeness, we give the algorithm. Let G be an antisymmetric directed graph. The 
algorithm computes the election E = {C,V), where C = V{G) and for each edge {a,b) in G there are exactly 

two voters, one with preference list a > b > C — {a,b} and one with preference list C — {a,b} > a > b. Since 
G is antisymmetric, it is easy to see that G = G{E). □ 

The above basic construction of McGarvey was improved upon by Stearns ||Ste59l| . While McGarvey's 
construction requires twice as many voters as there are edges in G, the construction of Stearns needs at most 
II V(G) II + 2 voters. Stearns also provides a lower bound on the number of voters that are needed to represent 
an arbitrary graph via an election. (It is easy to see that any such graph can be modeled via two irrational 
voters but the lower bound for the case of rational votes is somewhat harder.) 

We will often construct complicated elections via combining simpler ones. Whenever we speak of 
combining two elections, say Ei = (CijVi) and E2 = (C2,V2), we mean building, via the algorithm from 
Lemma |4~6l an election E = {C,V) whose election graph is a disjoint union of the election graphs of £1 and 
E2 with, possibly, some edges added between the vertices of G(£i ) and G{E2) (in each case we will explicitly 
state which edges, if any, are added). In particular, we will often want to add some padding candidates to 
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an election, without affecting the original election much. In order to do so, we will typically combine our 
main election with one of the following "padding" elections. Note that this construction, which we origi- 
nally developed for use in the study of control for Copeland" voting, has also proven useful in the study of 
manipulation for Copeland" IIFHS08II . 

Lemma 4.7 Let a be a rational number such that < a < 1. For each positive integer n, there is a 
polynomial-time (in n) computable election Pad,, = (C,V) such that \\C\\ = 2« + 1 and for each candidate 
a 6 C it holds that scorcp^^^^^ (c) = n. 

Proof. Fix a positive integer n. By Lemma 14.61 it is enough to construct (in polynomial time in n) a 
directed, antisymmetric graph G with 2n + 1 vertices, each with its indegree and outdegree equal to n. We 
set G's vertex set to be {0, 1, . . . ,2n} and we put an edge from vertex ; to vertex j {i ^ j) if and only if 
{j — i) mod {In + 1 ) < n. As a result there is exactly one directed edge between every two distinct vertices and 
for each vertex ; we have edges going out from / to exactly the vertices (/ + 1 ) mod (2« + 1 ) , (/ + 2) mod (2n + 
1), ...,(; + n) mod (2n + 1). Thus, both the indegree and the outdegree of each vertex is equal to n and the 
proof is complete. □ 

Lemma 14.61 is very useful when building an election in which we need direct control over the results 
of all head-to-head contests. However, in many cases explicitly specifying the results of all head-to-head 
contests would be very tedious. Instead it would be easier to specify the results of only the important head- 
to-head contests and require all candidates to have certain suitable scores. In the next lemma we show how to 
construct elections specified in such a way via combining a "small" election containing the important head- 
to-head contest with a "large" padding election. We mention that a generalized version of this lemma has 
since been used to study manipulation for Copeland" IIFHS08II . 

Lemma 4.8 Let E ~ (C,y) be an election where C = {ci, . . . ,c„/}, let a be a rational number such that 
< a < 1, and let n >n' be an integer. For each candidate Ci we denote the number of head-to-head ties of 
Ci in E by ti. Let ki, . . . , k„i be a sequence ofn' nonnegative integers such that for each hi we have <ki < n. 
There is an algorithm that in polynomial time in n outputs an election E' = (C',y') such that: 

L C = CUD, where D^{du---,d2„2}, 

2. E' restricted to C is E, 

3. the only ties in head-to-head contests in E' are between candidates in C, 

4. for each i, 1 < / < n' , score", (c,) = 2n^ — kj + tiU, and 

5. for each i, 1 < / < 2«^, score", (di) < «^ + 1. 

Proof. We build E' via combining E with a padding election F (see Lemma 14.71 and the paragraph just 
before it). F = {D,W), where D = {di,. . . ,d2„2}, is essentially the election Pad,,2 with one arbitrary candidate 
removed. We partition the candidates in D into n groups, Di,. . . ,D„, each with exactly 2« candidates and 
we set the results of head-to-head contests between each c, G C and the candidates in D according to the 
following scheme. For each y G { 1 , . . . , «'} such that / j, Ci defeats all members of Dj and c, defeats exactly 
as many candidates in D, (and loses to all the remaining ones) as needed to ensure that 

score", (c,) = 2n^ — ki + tiU. 

It is easy to see that this is possible: c,'s score in [C — Di^V') is 2n^ — 2n + k' + tiU for some k' such that 
< ^' < n' — ti. There are 2n candidates in D, and so c,- can reach any score of the form 2n'- — k + tiU, where 



41 



is an integer between and n, via defeating in head-to-head contests an appropriate number of candidates 
in Di and losing to all the remaining ones. 

Finally, since F is Pad„2 with one candidate removed, each di gets at most points from defeating other 
members of D and at most one point from possibly defeating some member of C. Thus, for each di G D, it 
holds that score", {di) <n^ + l. This completes the proof. □ 

Instead of invoking Lemma |4~8] directly, we will often simply describe an election in terms of the results 
of important head-to-head contests and the scores of the important candidates and then mention that such an 
election can be built, possibly with adding extra padding candidates that do not affect the general structure of 
the election, using Lemma |4~8] In each such case it will be clear that Lemma l4~8] can indeed be used to build 
the election we describe. 

4.1.3 Constructive Candidate Control 

Let us now turn to the case of constructive candidate control. Here we show that resistance holds for 
Copeland" in all cases (i.e., for all rational values of a with < a < 1 and for all constructive candidate 
control scenarios), except for CCACu for a G {0, 1} where vulnerability holds (see Theorem l4.1 lb . 

All our resistance proofs in this section follow via reductions from the vertex cover problem. Recall that 
in the vertex cover problem our input is (G, k) where G is an undirected graph and k a nonnegative integer 
and we accept if and only if G has a vertex cover of size at most k. Without the loss of generality, we assume 
that V{G) = {!,...,«} and E{G) = {ej , . . . ,e„,}. Note that if either m = 0, n = 0, or > min(n,OT) then the 
instance has a trivial solution and so in our proofs we will always assume that both n and m are nonzero and 
that k is less than mm{n,m). In each case, if the input to our reduction does not meet these requirements (or 
is otherwise malformed) the reduction outputs a fixed "yes" instance or a fixed "no" instance depending on 
the (easily obtained) solution to {G,k) or the malformation of the input. Also note that for every input {G,k) 
that meets our requirements, G has a vertex cover of size less than or equal to k if and only if G has a vertex 
cover of size k. 

Theorem 4.9 Let a be a rational number such that < o; < L Copeland" is resistant to constructive control 
via adding candidates ( CCAC), in both the nonunique-winner model and the unique-winner model, for both 
the rational and the irrational voter model. 

Proof. We give a reduction from the vertex cover problem. Let (G, k) be an instance of the vertex cover 
problem, where G is an undirected graph, ^ is a nonnegative integer, V{G) = {!,...,«}, E{G) ~ {ei, . . . ,e,„}, 
n y^O, m ^ 0, and k < mm{n,m). We construct an instance of CCAC for Copeland" such that a designated 
candidate p can become a winner after adding at most k candidates if and only if G has a vertex cover of size 
at most k. 

Our reduction works as follows. Via Lemma l4~8l we build an election E' = {C' ,V') such that: 

1. {/7,ei,...,e,„} CC', 

2. score", (p) — 2£^ — 1 in the nonunique-winner case {score", {p) ~ if' in the unique-winner case), 

3. for each e; G C, score" i{ei) = if-, and 

4. the scores of all candidates inC' — {p,e\^. . . ,e,„} are at most if — n — 1. 

We form election £ = (C, V ) by combining E' with candidates D = {I, . . . ,n} (corresponding to the ver- 
tices of G). The results of the head-to-head contests within D are set arbitrarily, and the head-to-head contests 
between the members of C and the members of D are set as follows: All candidates in C — {ei, . . . de- 
feat all members of D, and for each ; G D and each ej G {ei,. . . ,e,„}, candidate / defeats ej if ej is an edge 
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incident to / and loses otherwise. Our reduction outputs an instance {C,D,V,p, k) of CCAC and the question 
is whether it is possible to choose a subset D' CD, \\D'\\ <k, such that p is a winner (the unique winner) of 
Copeland" election {CUD',V). It is clear that this reduction is computable in polynomial time. We will now 
show that it is correct. 

If G does have a vertex cover of size k then add the candidates in D that correspond to the cover. Adding 
these candidates increases the score of p by k, while the scores of the e, 's can increase only by ^ — 1 each, since 
each edge is incident with at least one member of the vertex cover Clearly, candidates in C — {p, ei , . . . , e,„} 
can never become winners by adding at most k candidates from D, and thus p becomes a winner (the unique 
winner). 

For the converse, assume that p can become a winner (the unique winner) via adding at most k candidates 
from the set D. In order for p to become a winner (the unique winner), it must be the case that via adding 
candidates each e, gets at least one point less than p. However, this is possible only if we add candidates that 
correspond to a cover. □ 

Interestingly, when the parameter a is strictly between and 1 (i.e., < a < 1) then Copeland" is resistant 
to constructive control via adding candidates even if we allow adding an unlimited number of candidates (the 
CCACu case). The reason for this is that for each rational a strictly between and 1 our construction will 
ensure, via its structure, that we can add at most k candidates. On the other hand, both Copeland" and 
Copeland' are vulnerable to constructive control via adding an unlimited number of candidates (CCACu, see 
TheoremgTB. 

Theorem 4.10 Let a be a rational number such that < a < 1. Copeland" is resistant to constructive 
control via adding an unlimited number of candidates ( CCACu), in both the nonunique-winner model and the 
unique-winner model, for both the rational and the irrational voter model. 

Proof. We give a reduction from the vertex cover problem. Our reduction follows the same general struc- 
ture as that in the proof of Theorem |4.9l 

For the unique-winner case, we will need to specify one of the candidates' scores in terms of a number 
£ > such that 1 — £ > a. Let ti and f2 be two positive integers such that = 77 and such that their greatest 
common divisor is 1 . Clearly, two such numbers exist because a is rational and greater than 0. We set £ to be 
j^. By elementary number-theoretic arguments, there are two positive integer constants, ki and k2, such that 
k\a = k2- e. 

Let (G, k) be an instance of the vertex cover problem, where G is an undirected graph and kisa nonnega- 
tive integer. Let {ei, . . . ,e,„} be G's edges and let {1, . . . ,«} be G's vertices. As before, we assume that both 
n and m are nonzero and that k < min(«,m). Using Lemma l4~8l we can build an election E' — {C,V') with 
the following properties: 

1. {p,r,ei, . . . ,em} C (the remaining candidates in C are used for padding), 

2. score's/IP) ~ if — 1, 

3. icore", (r) = if — 1 — ^ + in the nonunique-winner case (icore", (r) = if — 1 — ^ + — £ in the 
unique- winner casj^l). 

4. for each e/ G C, ^core", (e,) = if — 1 + a in the nonunique-winner case (icore", (e;) — if — 1 in the 
unique-winner case), and 

"Note that via the second paragraph of the proof it is easy to build an election where r has a score of this form. To obtain the — e part 
of r's score we could, for example, have r tie with k\ padding candidates to obtain k^ — e points. The ki points could be accounted for 
as partof2f2-l. 
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5. the scores of all candidates in C — {p,r,ei, . . . ,e,„} are at most iP- — « — 2. 

We form election £ = (CUD,y ) via combining E' with candidates D = {1, . . . ,n} and appropriate voters 
such that the results of the head-to-head contests are: 

1 . p ties with all candidates in D, 

2. for each e,, if Cj is incident with some / G D then candidate / defeats candidate Cj, and otherwise they 
tie, and 

3. all other candidates in C defeat each of the candidates in D. 

We will now show that G contains a vertex cover of size at most k if and only if there is a set D' (ZD 
such that p is a winner (the unique winner) of Copeland" election (CUZ)',y). It is easy to see that if D' 
corresponds to a vertex cover of size at most k then p is a winner (the unique winner) of Copeland" election 
(CUZ)',y). The reason is that adding any member of D' increases p\ score by a and increases r's score by 
one, and for each ej, adding / e D' increases e/s score by a if and only if ej is not incident with i. Thus, via 
a simple calculation of the scores of the candidates, it is easy to see that p is a winner (the unique winner) of 
this election. 

On the other hand, assume that p can become a winner (the unique winner) of Copeland" election (C U 
D' ,V) via adding some subset D' of candidates from D. First, note that ||D'|| < k, since otherwise r would 
end up with more points than (at least as many points as) p and so p would not be a winner (would not be a 
unique winner). We claim that D' corresponds to a vertex cover of G. For the sake of contradiction, assume 
that there is some edge Cj incident to vertices u and v such that neither u nor v is in D' . However, if this were 
the case then candidate Cj would have more points than (at least as many points as) p and so p would not be 
a winner (would not be a unique winner). Thus, D' must form a vertex cover of size at most k. □ 

Note that in the above proof it is crucial that a is neither nor 1 . If a were then the proof would fall 
apart because we would not be able to ensure that D' is a vertex cover, and if a were 1 then we would not be 
able to limit the size of D' . In fact, we will now show, as Theorem l4.1 II that both Copeland" and Copeland' 
are vulnerable to control via adding an unlimited number of candidates (CCACu). 

Theorem 4.11 Let a G {0,1}. Copeland" is vulnerable to constructive control via adding an unlimited 
number of candidates ( CCACu), in both the nonunique -winner model and the unique-winner model, for both 
the rational and the irrational voter model. 

Proof. Our input is candidate set C, spoiler candidate set D, a collection of voters with preferences (either 
preference lists or preference tables) over CUD, and a candidate p G C. Our goal is to check whether there 
is some subset D' (ZD such that p is a winner (the unique winner) of (C UD',y) within Copeland". We will 
show that we can find such a set D' , if it exists, by the following simple algorithm. 

Let D\ = {d ^ D \ icore"^^^j y)!/-") = !}■ Initialize D' to be Di, and delete every d G D' for 
which icore^ij^, y^{p) < score"^^^^, yj{d). For the unique-winner problem, delete every d € D' 
for which icore"^^^, {p) < score'^^^^^ [d). 

Clearly, this algorithm runs in polynomial time. To show that the algorithm works, first note that for 
all D C D, if /7 is a winner (the unique winner) of (CUZ),y), then /; is a winner (the unique winner) of 
(C U (Z) nDi),y). This is so because, by Observation l4.2l 

*^^''^rcu6,v)(/') = ^^^'"^rcu(DnD.),y)(^)+ L '^o<-e^{{p.d}.vp) 

deD-D, 
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Now suppose that for some D C Di, p is a winner (the unique winner) of {CL)D,V), but that the algo- 
rithm computes a set D' such that p is not a winner (not a unique winner) of {C U D' ,V) . We first consider 
the case that D C D'. Since p is not a winner (not a unique winner) of {CUD' ,V), it follows by the construc- 
tion of D' that there exists a candidate d <eC — {p} such that icore^^^^, [p) < score"^^^^, {d) (such that 
icore^^j^, < icore^^j^, yj(^f)). However, in the nonunique-winner model we then have 

score1cyjD>y){p) = ^^«'-^"cud.v) (^') + H'^'H " H-^H 

which is a contradiction. In the unique-winner model, the first ">" in the above inequality becomes a ">" 
and we reach a contradiction as well. 

Finally, consider the case that D % D' . Let d be the first candidate in D that is deleted from D' in the 
algorithm. Then there is a set D" such that D (ZD" (Z Di and score"^^^^,, y-^{p) < score'^^^^,, y^{d) in the 

nonunique-winner case (score^^^,, y){p) — ■^'^^'"^(cud" v) ^'^^ in the unique-winner case). Since D C D" C Di, 
we have 

1. score^^^^^^^ip) = score^c^^„ y^{p) - {\\D"\\ - \\D\\) < score^^^^,, ^^{d) - {\\D"\\ - \\D\\) < 
score"^^- {d) in the nonunique-winner case, and 

2. score'^^^^^^ip) = scoref^^^,, ^^ip) - {\\D"\\ - \\D\\) < score'^^^^,, ^^{d) - (||D"|| - < 
scorej^^g (d) in the unique-winner case. 

It follows that p is not a winner (not a unique winner) of (CUD, V). This is again a contradiction. □ 

The remainder of this section is dedicated to showing that for any rational a such that < a < 1, 
Copeland" is resistant to constructive control via deleting candidates and to constructive control via par- 
titioning candidates (with or without run-off and in both the TE and the TP model). We first handle the case 
of constructive control via deleting candidates (CCDC) and then, using our proof for the CCDC case as a 
building block, we handle the constructive partition-of-candidates cases. The constructions in the proof of 
Theorem 14. 121 are crucial for the remaining proofs, so we encourage the reader to read that proof particu- 
larly carefully, as it is very difficult to understand the remainder of the section without understanding the 
constructions and arguments in the proof of Theorem |4.12| 

Theorem 4.12 Let a be a rational number such that < a < 1- Copeland" is resistant to constructive 
control via deleting candidates ( CCDC), in both the nonunique-winner model and the unique-winner model, 
for both the rational and the irrational voter model. 

Proof. The proof follows via a reduction from the vertex cover problem. We first handle the nonunique- 
winner case. 

Let {G,k) be a given input instance of the vertex cover problem, where G is an undirected graph and k 
is a nonnegative integer. Let V{G) = {!,...,«} and let E{G) = {ei , . . . ,e,„}. Again, we assume that n and 
m are nonzero and that k < min(«,m). We build election E' = {C' ,V'), where C' = {p,z,ei, . . . ,e„,, 1, . . . ,n} 
and the voter set V' yields the following results of head-to-head contests (see Lemma |4~6] |: 

1 . p defeats z, 

2. z defeats each candidate e, G C', 
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3. each candidate e,- € C defeats exactly those two candidates m, v G {1, . . . ,«} that the edge e, is incident 
with, 

4. each candidate u £ {!,...,«} defeats p and all candidates e,- G C such that vertex u is not incident with 
e,, and 

5. all the remaining contests result in a tie. 

Let £ = n + m. We form an election E = {C,V) via combining election E' with election Pad^' = {C",V"), 
where C" = {to, . . . ,t2e} and the set V" of voters is set as in Lemma I4r7] We select the following results of 
head-to-head contests between the candidates in C' and the candidates in C": p and all candidates e, G C' 
defeat everyone in C", and each candidate in C" defeats all candidates in C' ~ {p,ei, . . . ,e,„}. It is easy to 
verify that election E yields the following Copeland" scores; 

1. score'^ip) =ma + l+2i+l, 

2. score" (z) = m + na, 

3 . for each e, G C, score" (e,- ) ~ma + 2 + 2£+l, 

4. for each m G {1, . . . ,«}, score"{u) < 1 +m + na, and 

5. for each f; G C, score" (tj) = £ + n + I. 

The set of winners of £ is W = {e i , . . . , e,„ } . We claim that p can become a winner of Copeland" election 
E via deleting at most k candidates if and only if the graph G has a vertex cover of size at most k. Note that 
p is the only nonwinner of E that can become a winner after deleting up to k candidates. All other candidates 
lose by more than k points to the members of W. 

We now show that if p can become a winner via deleting at most k candidates then there is a set D C 
{!,...,«} such that ||D|| < k and p is a winner of election {C — D,V). Let D' be a smallest (in terms of 
cardinality) subset of C such that p is a winner of election {C — D\V). Clearly, no candidate in C" belongs 
to D' because each member of C" loses his or her head-to-head contests with each member of {p} so 
deleting any such candidate from C does not bring p any closer to being a winner. Similarly, z wins all 
head-to-head contests with the members of W and so D' does not contain z- Thus, D' C {I, . . . ,n,ei,. . . ,e,„}. 
Choosing a subset D' of C that ensures that p is a winner means, in essence, choosing a D' such that each 
candidate in {ei, . . . ,e,„} is either in D' or loses at least one point due to some candidate from {!,...,«} being 
in D'. (Keep in mind that deleting any e,- affects the scores of the remaining members of {ei, . . . ,e„,} and p 
equally.) Let us assume that there is some e, G D' such that e,- is an edge incident to vertices u and v in G. D' 
does not contain u and does not contain v, since e, defeats both u and v in their head-to-head contests; so if D' 
included either u or v then p would be a winner of election (C — {D' — {e,}) , V), contradicting the fact that D' 
is a smallest set such that deleting D' from C ensures /^'s victory. However, if D' contains neither u nor v then 
/? is a winner of election (C — {{D' U {m}) — {e,}). Thus, by removing all members of {ei , . . . ,6,,,} from D' 
and replacing each of them with one of the vertices they are incident with, we can build a set D C { 1 , . . . , «} 
such that ||D|| < k and is a winner of election {C — D,V). 

We will now argue that the set D from the previous paragraph corresponds to a vertex cover of G. In elec- 
tion E, each of ei , . . . , e,„ has exactly one point of advantage over p. Deleting any candidate u corresponding 
to a vertex of G does not affect p's score but it does decrease by one the scores of all the candidates ei , . . . , e,„ 
that correspond to the edges incident with u. Since deleting the candidates in D makes p a winner and since 
D contains at most k candidates that correspond to vertices of G, it must be the case that D corresponds to 
a vertex cover of G. On the other hand, it is easy to see that if G has a vertex cover of size at most k then 
deleting the candidates that correspond to this vertex cover guarantees p's victory. Thus our reduction is 
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correct and, as is easily seen, computable in polynomial time. The proof for the nonunique-winner case is 
complete. 

For the proof in the unique-winner case, we need to add one more candidate, z, that is a "clone" of z (i.e., 
z ties in the head-to-head contest with z and has the same results as z in all other head-to-head contests). In 
such a modified election, p has the same Copeland" score as each of the e,'s and, since a candidate ties p if 
and only if he or she ties each of the e,'s, p has to gain at least one point over each of them to become the 
unique winner The rest of the argument remains the same. □ 

We will use the above construction in the resistance proofs for the cases of control via partition of can- 
didates (with or without run-off, in TP and TE) below. In particular, we will need the fact that in this 
construction the only candidates that can be winners after deleting at most k candidates are members of the 
set {p}\JW (recall that W = {e\,.. . ,e,„}). 

Often, when proving things about candidate control problems we perform operations on the candidate 
set (e.g., deleting candidates, partitioning the candidate set, etc.) while the voter set remains unchanged. To 
simplify our notation, in the proofs below we thus will often use the candidate set as if it were the whole 
election and leave V implicit from context. For example, if we had two candidate sets C and D, where D (ZC, 
and a voter collection V with voter preferences over the candidates from C, we may use C — D to mean the set 
of candidates that belong to C but not to D, but may also use C — Dio mean the election (C — D, V ) (where, 
as usual, the preferences of voters in V as used there are implicitly restricted to the candidates in C — D). In 
the second case, we typically write election C D rather than set C — D. The intended meaning is always 
clear from context. 

Theorem 4.13 Let a be a rational number such that < OC < 1. Copeland" is resistant to constructive 
control via run-off partition of candidates in both the ties-promote model ( CCRPC-TP) and the ties-eliminate 
model ( CCRPC-TE), in both the nonunique-winner model and the unique-winner model, for both the rational 
and the irrational voter model. 

Proof. The proof follows via reductions from the vertex cover problem to appropriate variants of the 
CCRPC problem for Copeland" (i.e., to CCRPC-TP and CCRPC-TE in both the nonunique-winner model 
and the unique-winner model). 

Let {G,k) be an instance of the vertex cover problem, where G is an undirected graph and A: is a non- 
negative integer. As before, we let V{G) = {!,... ,«} and E{G) = {ei, . . . ,e,„}, where « 7^ 0,ot 7^ and 
k < mm{n,m). Our goal is to build an election E in which our favorite candidate can become a winner (the 
unique winner) via run-off partitioning of candidates (with either the TP or the TE model) if and only if G 
has a vertex cover of size at most k, and we do so by combining suitable elections F and H using Construc- 
tion 14.141 below. We will later specify F and H separately for each of the two variants of the Copeland" 
CCRPC problem (TP and TE), but before doing so we will outline our proof in more detail and prove a useful 
property of Construction |4. 14| (see Lemma |4.15l l. 

Construction 4.14 Let F and H be two elections, F with candidates /i = p,/2, • • • and H with candidates 
r,hi, . . . ,hq, q>2. We form election E = (C,y), where C — {r,/i , . . . ,/„,/zi, . . . by combining F and H 
and setting the results of head-to-head contests between candidates ofF and H as follows: 

L For each f G C, f defeats r. 

2. For each hi,fj G C, hi defeats fj. 

In the next lemma we will show that the only partitions (Ci ,C2) of C such that p is a winner (the unique 
winner) of the resulting Copeland" run-off election are of the form Ci = F — D, C2 = H U D, where D is a 
subset of F — {p} (without loss of generality, we will assume that p G Ci). Next we will specify two variants 
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of the election H, one for the TP case and one for the TE case, such that the only partitions of the form 
presented above that may possibly lead to p being a winner (the unique winner) have ||D|| < k. We will 
conclude the construction by choosing F to be one of the elections from the proof of Theorem l4.12l so that p 
can become a winner (the unique winner) of F by deleting at most k candidates if and only if G has a vertex 
cover of size at most k. 

Let E, F, and H be elections as in Construction ^. 141 We further assume that there are no ties in the head- 
to-head contests among the candidates of H (and that thus there are no ties in the head-to-head contests among 
the corresponding candidates in E) and that in the case of CCRPC-TE, H — {r} has a unique winner Let us 
assume that p can become a winner (the unique winner) of election E via run-off partition of candidates and 
let (Ci ,C2) be a partition of candidates such that /? S Ci is a winner (the unique winner) of the thus-formed 
Copeland" run-off election (performed using either the TP or the TE tie-handling rule). 

Lemma 4.15 Let E, F, and H be elections as in Construction 14. 74l and let {C\,C2) be a partition of C that 
makes p a winner (the unique winner) in either the CCRPC-TP or the CCRPC-TE scenario, where we adopt 
the assumptions explained in the previous two paragraphs. There is a set D F ^ {p} such that C\ — F 
and C2 = HUD. 

Proof. We will handle the TP and TE cases in parallel. For the sake of seeking a contradiction, let us assume 
that Ci n// ^ 0. We consider three cases. 

Case 1: Ci contains at least two candidates from H — {r}. Let /i, and hj be two such candidates such 
that hi wins his or her head-to-head contest with hj. Note that p is not a winner of {C\,V) because 
score^^^ y^{hi)>\\CinF\\ + l whereas score^^^ v')(/') < l|Ci nF|| (since p gets at most ||Ci nF|| - 1 
points from defeating members ofCiCiF and one additional point from defeating r if r G Ci). Thus, in 
this case, p does not advance to the final stage, irrespective of the tie-handling model used. 

Case 2: Ci contains exactly one member of H — {r}, say /i,. By an analysis similar to the one above, if C] 
does not contain r then score'^^^ (p) < Copeland"^^^ y) Q'^i) irrespective of the tie-handling model 
p does not advance to the final stage. If r e Ci then score"^^ v)^P) — Copeland"^,-^ v){hi). Thus, in 
the TE model, p certainly does not advance to the final stage. In the TP model, the set of candidates 
that advance from (Ci , V) to the final stage includes /j, and it might include p. However, the final stage 
includes at least one member of H — {r,/;,}, namely a winner of (C2, V) (it is easy to verify that in our 
current case (C2, V) has at least one winner that belongs to // — {r}). Thus, either p does not participate 
in the final stage or, via the same argument as in Case 1, is not a winner of the final stage because he 
or she meets at least two members of H — {r} there. 

Case 3: C\ HH = {r}. Since r loses the head-to-head contests with all members of F, r certainly does not 
advance to the final stage of the election. Let us assume that p participates in the final stage. However, 
at least one winner (the only winner, in the TE modelj*! of (C2, V) is a member of H — {r}. Then, via 
the same argument as in the first subcase of Case 2 above, p is not a winner of the final stage. 

Thus the lemma holds. □ Lemma 14.151 

We now define variants of election H appropriate for the TE and TP models, in the nonunique-winner 
model, such that the set D in Lemma |4.15| is forced to have at most k elements. (We will handle the unique- 
winner cases at the end of this proof.) 

'^Recall that we assumed that in the TE case H — {r} has a unique winner and that each member of H — {r} defeats each member of 
F in their head-to-head contests. 
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For the TP case, we set H' to be an election with candidate set , . . . ,/!^}, ^ > 3, such that there exists 
a nonnegative integer £ for which we have the following scores: 

1 . score'^, (r) = £, 

2. for ;■ G { 1 , 2}, score'^, {hi)=l-k-l, and 

3. for each / G {3, . . . ,q], scorefj,{hi) < £ — k — I. 

Such an election is easy to build in polynomial time using Lemma |4~8] 

For the TE case, we set H" to have candidate set {r,hi, . . . ,hq}, q>2, with the following scores: 

1 . score'^,, (r) = £, 

2. score'^ii {h\) ^ £ — k, and 

3. for each / G {2, . . . , q}, score'j^,, (hj) < £ — k — I. 

Note that both H' and H" satisfy the assumptions that we made regarding H before Lemma 14.151 

Lemma 4.16 For the TP case with H ^ H' and for the TE case with H = H", the set D in Lemma \4.15\ has 
the additional property that \\D\\ <k. 

Proof. Recall that in E each candidate /i, EH — {r} wins each of his or her head-to-head contests with 
candidates in F and that each candidate fjGF wins his or her head-to-head contest with r. From Lemma |4.15l 
we know that if p is a winner in either the CCRPC-TP or the CCRPC-TE scenario with the partition (Ci , C2) 
of C, then Ci = F ~D and C2— HUD. If ||D|| > k were to hold in the TP case, then at least hi and /i2 would 
be winners of (C2, V), and so even if p were promoted to the final stage, he or she would meet two members 
of H ~ {r} there and would not become a global winner If ||D|| > k were to hold in the TE case, then hi 
would be the unique winner of (C2 , V ) and the final stage would involve, at best, p and h 1 . Naturally, p would 
lose. □ Lemma 14.161 

For the TP case (TE case), we set F to be the election built in the proof of Theorem l4. 12l for the nonunique- 
winner model (for the unique-winner model). In particular, candidates ei, . . . ,e,„ correspond to the edges of 
graph G. Since p can become a winner of his or her subcommittee in the TP model (in the TE model) if 
and only if p can become a winner (the unique winner) of election F — D, where D C F — {p} and ||D|| < k, 
it follows by our choice of F, that p can advance to the final stage only if G has a vertex cover of size at 
most k. On the other hand, if G has a vertex cover of size at most k then it is easy to see that if we partition 
the candidates in C as in Lemma l4.15l with D containing the candidates corresponding to an at-most-size-A; 
vertex cover of G then p advances to the final stage of the election and is a winner there. Why? In the TP 
case, the subcommittee HUD has r as the unique winner and the subcommittee F — D's winner set contains 
p and some subset of {ei, . . . ,e,„} (see the note below the proof of Theorem l4.12b . Since p and all candidates 
in {ei, . . . ,e„j} tie in their head-to-head contests and since they all defeat r, they all are winners of the final 
stage. Similarly, in the TE case, r is the only candidate that can be a unique winner of subcommittee HUD, 
and the subcommittee F D has p as the unique winner Since p defeats r, p is the winner of the final stage. 
This completes the proof for the nonunique- winner case. 

The proof for the TE case in the nonunique-winner model works just as well in the unique-winner model 
and so it remains to handle the TP case in the unique-winner model. To do so, we form the election E 
using Construction IJT4] with F set to the unique-winner version of the election from Theorem l4. 12l and with 
H set to H'. Via Lemmas 14. 151 and 14. 161 and the subsequent discussion we have that any partition of £"s 
candidate set C into Ci and C2 such that /? G Ci is a winner of the final-stage election requires Ci ~F D and 
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Ci = HUD, where D corresponds to an at-most-size-A: vertex cover of G. On the other hand, by the choice of 
F, it is easy to see that using such a D guarantees that p is the unique winner of the final stage election. The 
proof is complete. □ Theorem l4.13l 

Copeland" is also resistant to constructive control via partition of candidates (without run-off) for each 
rational value of a between (and including) and 1 . However, the proofs for the TP and TE cases are not as 
uniform as in the CCRPC scenario and so we treat these cases separately. 

Theorem 4.17 Let a be a rational number such that < a < 1- Copeland" is resistant to constructive 
control via partition of candidates with the ties-promote tie-handling rule ( CCPC-TP), in both the nonunique- 
winner model and the unique-winner model, for both the rational and the irrational voter model. 

Proof. The proof is very similar to that of Theorem l4.13l and we maintain similar notation. In particular, 
{G,k) is the given instance of the vertex cover problem we reduce from (where V{G) = {!,... ,n}, E{G) = 
{ei,... ,e,„}, n ^ 0,m ^ 0, and k < min(«,m)), we set F to be the nonunique-winner variant of the election 
built in the proof of Theorem 14. 1 21 when we handle the nonunique-winner case for Copeland"-CCPC-TP, 
and we set F to be the unique-winner variant of that election when we handle the unique-winner case for 
Copeland«-CCPC-TP 

We define H to be an election with candidate set {r,/ii, . . . ,hi/}, q>3, such that there exists a nonnegative 
integer d for which we have the following scores: 

1. score'^ir) = £, 

2. for ie {1,2,3}, scoref,{hi)^ I- k-1, 

3. for each ; G {4, . . .,q}, score^{hi) <l — k—l, and 

4. the results of the head-to-head contests between h2, and /13 are that hi defeats /12, h2 defeats hj, 
/13 defeats hi, and r defeats each of hi, ho, and /13LJ 

Election H is easy to build using Lemma |4~8l Election E = {C,V) is formed via applying Construc- 
tion |4ri4]to elections F and//. 

In constructive control via partition of candidates (CCPC), the first stage of the election is held among 
some subset C' C C of candidates. In the TP model, the winners of the first stage compete with the candidates 
in C — C'. The following two lemmas describe what properties C' needs to satisfy for p to become a winner 
(the unique winner) of the final stage. 

Lemma 4.18 Let C' be a subcommittee such that p is a winner (the unique winner) of the final stage in E 
whose first stage involves subcommittee C' in the CCPC-TP model. Then p is not a member of C'. 

Proof. If p were in C' together with at least two members of H then p would not be a winner of this 
subelection. If p were in C' with less than two members of H then p would either meet at least two members 
of // in the final stage or p would not make it to the final stage. In either case, p would not be a winner of the 
final stage. □ Lemma l4.18l 



Lemma 4.19 Let C' be a subcommittee such that p is a winner (the unique winner) of the final stage of E 
whose first stage involves subcommittee C' in the CCPC-TP model. Then C' is of the form HUD, where 
D C F - {p} and \\D\\ <k. 

'^^The reason for such a cycle of head-to-head contest results is that if we delete at most one candidate from H then there still will be 
at least one candidate with score £ — k— I. 
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Proof. From Lemma [4.1 81 we know that p is not in C' . If more than two members of H were not in C' then 
p would meet at least two members of H in the final stage and so would not be a winner (would not be a 
unique winner). 

Assume that exactly one member of H, say is not in C' . If r is not in C' then the set of winners of 
(C', y) includes at least one member of H — {r} and so p meets at least two members of H ~ {r} in the final 
stage and thus is not a winner of that stage. So we additionally assume that r is in C' . Since H — {h} C C' , 
at least two of hy, I12, and /i3 are in C'. If C' contains more than k candidates from F then at least one of hi, 
!i2, and /13 is a winner of {C ,V) and p, again, competes (and loses) against at least two members of H in the 
final subelection. Thus let us assume that C' contains at most k members of F, call them di,d2,--- ,dj, where 
j < k. In such a case, p loses to at least one candidate sinF — {di ,...,dj} (recall that k<n because otherwise 
the input vertex cover instance is trivial and so our s can be, e.g., one of the candidates in F — {di ,dj} 
corresponding to a vertex in G) and so in the final stage p has a score lower than /I's score: li wins the head- 
to-head contests with everyone with whom p wins his or her head-to-head contests except for r, but h also 
wins his or her head-to-head contests with both p and s. As a result, p does not win the final stage. This 
completes the proof. □ Lemma [4.191 

Since r is the unique winner of any subelection of the form //UZ), where D contains at most k candidates 
from F — {p} and all members of F defeat r in their head-to-head contests, via Lemma l4.191 we have that p 
can become a winner (the unique winner) in our current control scenario (CCPC-TP) if and only if we can 
select a set D of at most k candidates from F such that p is a winner (the unique winner) of F — D. By the 
choice of F and Theorem l4.12l this is possible only if G has a vertex cover of size at most k. This completes 
the proof. □ Theorem |4.17| 

We now turn to the TE variant of constructive control via partitioning candidates. We start by showing 
resistance for Llull's system (i.e., for Copeland'). 

Theorem 4.20 Copeland' is resistant to constructive control via partition of candidates with the ties- 
eliminate tie-handling rule (CCPC-TE), in both the nonunique -winner model and the unique-winner model, 
for both the rational and the irrational voter model. 

Proof. We use the same reduction as that in the proof of Theorem l4.17[ except that we now use a slightly 
different variant of the election H. 

Let (G, A:) be our input instance of the vertex cover problem. As in the proof of Theorem l4.17l we form an 
election E via combining elections F and H, where F and H are as follows. If we are in the nonunique-winner 
model then F is the nonunique-winner variant of the election from the proof Theorem l4T2l and otherwise 
it is the unique-winner variant of that election. H is an election whose candidate set is {r, /ii, . . . and 
whose voter set is such that r ties all head-to-head contests with the candidates hi,...,h( and the scores of 
the candidates satisfy: 

1 . score\j (r) = 

2. score^i {hi) ^ £ — k, and 

3. for each h £ H — {r,hi}, scorel^Qi) < £ — k. 

It is easy to see that such an election can be built in polynomial time in k (thus ensuring that £ is polynomially 
bounded in k). A simple variant of the construction from Lemma l4~8] can be used for this purpose. (We cannot 
use Lemma |4~8] directlv because it doesn't allow us to have r tie all its head-to-head contests, but clearly a 
similar construction works.) As usual, we assume k < min(n, m), where « is the number of vertices in G and 
m is the number of G's edges. 
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It is easy to see that if G does have a vertex cover of size k then using the subcommittee HUD, where 
D is a subset of candidates from F that corresponds to this vertex cover does make p a winner (the unique 
winner) of the final stage of our two-stage election. 

For the converse, we show that if p can be made a winner (the unique winner) via partition of candidates 
then G does have a vertex cover of size at most k. First, we note that p is not a winner (and so certainly 
not a unique winner) of any subelection that involves any of the candidates hi,...,h(. (This is because each 
of hi, . . . wins all his or her head-to-head contests with members of F and ties the head-to-head contest 
with r.) Thus if p is a winner (the unique winner) of our two-stage election then all candidates hi,..., he 
participate in the first-stage subcommittee and p does not. In this case, the subcommittee also contains r 
because otherwise hi would be the unique winner of the subcommittee and, via the previous argument, p 
would not be a winner of the final stage. Similarly, if the subcommittee contained more than k members of F 
then, again, hi would be its unique winner preventing p from being a winner of the final stage. 

Let C' be a subcommittee (i.e., the set of the candidates that participate in the first stage of the election) 
such that p is a winner (the unique winner) of our two-stage election. Via the previous paragraph it holds that 
C' = HUD, where D C F and ||D|| < k. Either r is the unique winner of C' (if < k) or C' does not have 
a unique winner. Thus the winner set of the final stage is the same as that of F — D because all candidates in 
F — D defeat r in their head-to-head contests. As a result, via Theorem l4.12l we have that p is a winner (the 
unique winner) if and only if D corresponds to a vertex cover of G of size at most k. □ 

Theorem 4.21 Let a be a rational number, < a < 1. Copeland" is resistant to constructive control via 
partition of candidates with the ties- eliminate tie-handling rule (CCPC-TE), in both the nonunique-winner 
model and the unique-winner model, for both the rational and the irrational voter model. 

Proof. The proof follows via a reduction from the vertex cover problem. Let {G,k) be our input instance, 
where G is an undirected graph and is a nonnegative integer. By combining two subelections, F and H, we 
will build an election E such that a candidate p in E can become a winner (the unique winner) via partitioning 
of candidates if and only if G has a vertex cover of size at most k. 

In the nonunique-winner case, we take F to be the nonunique-winner variant of the election built in the 
proof of Theorem 14.121 In the unique-winner case, we set F to be this election's unique-winner variant. 
Election H has candidate set {r,f,hi, . . . , hj^] and a voter set that yields the following results of head-to-head 
contests within H: 

1 . r and r are tied, 

2. r ties with every candidate /i,-, ; G { 1 , . . . , A:}, 

3. f defeats every candidate hi, i E {!,..., k}, and 

4. The results of head-to-head contests between candidates /ji , . . . , are set arbitrarily. 
Within election H the candidates have the following Copeland" scores: 

1. icoreg(r) = ka + a, 

2. score'^{r) = k + a, and 

3. for each i e {l,...,k}, scoref^Qii) <k-\ + a. 

We form election E ^ {C,V) via combining elections F and H in such a way that r defeats all the candidates 
in F and for all the other head-to-head contests between the candidates from F and the candidates from H 
the result is a tie. 
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It is easy to see that if G does have a vertex cover of size k then we can make p a winner (the unique 
winner) via partitioning of candidates. To do so we hold the first-stage election among the candidates in 
HUD, where D is a set of candidates in F that correspond to a vertex cover within G of size k. Since r and 
r are the winners of this subelection, no candidates from this subelection proceed to the final stage of the 
election. By Theorem l4.12l it follows that p is a winner (the unique winner) of the final stage. 

For the converse, let us assume that p can become a winner (the unique winner) via partitioning of 
candidates and let C' be a subset of candidates such that if the first-stage election is (C, V) then /? is a winner 
(the unique winner) of the final stage. If p and r participate in the same subelection (be it the first stage or 
the final stage) then it is easy to see that p is not a winner of that subelection. (This is true because r wins 
his or her head-to-head contests with all members of F and ties with everyone else, whereas p ties with all 
candidates rjii,... but loses to r.) Thus r eC , p <^ C', and r is not the unique winner of (C, V) 

We will now show that C' contains at most k members of F. For the sake of seeking a contradiction let 
us assume that this is not the case, and let d be the number of members of F in C', d > k, and let k' be the 
number of members of {hi,. . . in C'. Let us rename the candidates in F so that f\,. . . ,fd are those that 
belong to C' . Finally, we set i> = if r ^ C', and b —\ otherwise. We have the following Copeland" scores 
within {C',V): 

1. score^^,y-^[r)=d + k'a + ba, 

2. score'^^, (r) = k' + da + a, provided that r G C', 

3. for each /j,- G C', score"^, {h,) < k' — I + da + a, and 

4. for each /,■ e C', score"^, y^{fi)<d—l+ k'a + ba. 

Since k' <k and d> k,\\. is easy to see that irrespective of whether f participates in C' , r is the unique winner 
of (C',y), which is a contradiction. Thus C' contains at most k members of F . 

Let D be the set of candidates from F that are in C' and that do not participate in the final stage of the 
election. Since /? is a winner (the unique winner) of the final stage, r does not participate in that stage. Thus 
the final stage is held with candidate set {F — D) UH', where H' is some subset of H — {r}. It is easy to 
see that the winners of F —D have such high scores in addition to tieing their head-to-head contests with all 
members of H' that the winner set of {{F — D) ij H\V) is the same as that of (F — D, V ). 

To see this, we note the following: Let c be a winner of F — D. In F — D, c's score is at least ma + 2 + 
2£+l ~ \\D\\, where £ = n + m, n is the number of vertices of G, and m is the number of edges of G. (See 
Theorem 14 . 1 2 1 and the scores of candidates p and e,.) Since, due to our usual convention, k < min(m,«), it 
holds that the lowest score a winner of F — D might have is at least ma + 2 + 2£ + 1 — \\D\\. The highest 
score a candidate in H' might have is k + a. Since all members of H' tie in their head-to-head contents with 
members of F — D (and since F contains m + n + 2 candidates), the highest score a member of H' can have 
in {F-D)UH' is 

k+a+{m + n + 2)a-\\D\\ < k + a + £ + 2 - \\D\\ < ma + 2 + 21 + I - \\D\\ < scorefp_^■^^JfJ,{c). 

Thus any winner of F — D is still a winner of {F — D) \J H' . 

Thus, via Theorem l4.12l if p is a winner (the unique winner) of F — D, \\D\\ < k, then D corresponds to a 
vertex cover of size at most k in G. This completes the proof. □ 
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Table 2: Table of theorems covering all resistance results for voter control for Copeland". Each theorem 
covers both the case of rational voters and the case of irrational voters. 

4.2 Voter Control 

In this section, we show that for each rational a, < a < 1, Copeland" is resistant to all types of voter 
control. Table[2]lists for each type of voter control, each rational a, < a < 1, and each winner model (i.e., 
the nonunique-winner model and the unique-winner model) the theorem in which each given case is handled. 
We start with control via adding voters. 

Theorem 4.22 Let a be a rational number such that < o; < 1. Copeland" is resistant to both constructive 
and destructive control via adding voters ( CCAV and DCAV), in both the nonunique-winner model and the 
unique-winner model, for both the rational and the irrational voter model. 

Proof. Our result follows via reductions from the X3C problem. We will first show how to handle the 
nonunique-winner constructive case and later we will argue that the construction can be easily modified for 
each of the remaining cases. 

Let {B,S^) be an X3C instance where B = {bi, . . . ,bj,ii} and ^ = {5i,...,5„} is a finite collection of 
three-element subsets of B. Without loss of generality, we assume that k is odd (if it is even, we simply add 
hk+ub3k+2,h{k+i) to B and Sn+i = {bsk+uhk+i^hik+i)} to S^, and add 1 to k). The question is whether 
one can pick k sets 5a, , . . . such that B = U5=i ^aj- 

We build a Copeland" election E = {C,V) as follows. The candidate set C contains candidates p (the 
preferred candidate), r {p's rival), s, all members of B, and some number of padding candidates. We select the 
voter collection V such that in their head-to-head contests, s defeats p, r defeats each bi, and such that we have 
the following Copeland" scores for these candidates, where £ is some sufficiently large (but polynomially 
bounded in «) nonnegative integer; 

1. score"{p) = i — I, 

2. score'^{r) =i + 3k, and 

3. all other candidates have Copeland" scores below £—1. 

It is easy to see that E can be constructed in polynomial time by Lemma |4~8] In addition, we ensure that we 
have the following results of head-to-head contests between the candidates in C; 

1. vse{s,p) =k-l, 

2. for each / G {l,...,k}, vs£ {r,bi) ~ k — 3, and 
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3. for all other pairs of candidates c, d, we have | vs£ (c, c/) | >k+\. 

This can be done since we can add 2 to vs£ (c, d) and leave all other relative vote scores the same by adding 
two voters, c > d > C — {c^d} and C — {c ,d} > c > d (see Lemma |4~6] l. Since k is odd and the number of 
voters is even (see Lemma |4~8] l, it is easy to see that we can fulfill these requirements. 

We also specify the set W of voters that the chair can potentially add. For each set 5, G ^ we have a 
single voter w, G W with preference list 

p> B -Si> r> Si> ■■■ 

(all unmentioned candidates follow in any fixed arbitrary order). We claim that ,y contains a A:-element cover 
of B if and only if p can become a winner of the above election via adding at most k voters selected from W . 

If 5^ contains a A:-element cover of B, say 5„, , . . . , then we can make p a winner via adding the voters 
from U = {w„j , . . . ,Wai_}. Adding these k voters increases p's score by one, since p now defeats s in their 
head-to-head contest. Since voters in U correspond to a cover, the score of r goes down by 3k points. Why? 
For each bj G B, adding the k—l voters in U that correspond to the sets in the cover not containing bj increases 
the relative performance of versus r by A: — 1 votes, thus giving bi two votes of advantage over r. Adding 
the remaining voter from U decreases this advantage to 1, but still bi wins the head-to-head contest with r. 

We now show that if we can make p a winner by adding at most k voters then contains a A:-element 
cover of B. Note that p is the only candidate that can possibly become a winner by adding at most k voters, 
that p can at best obtain Copeland" score £, that p will obtain this score only if we add exactly k voters, and 
that r can lose at most 3^ points via losing his or her head-to-head contests with each of the Zj/'s. Thus the 
only way for p to become a winner by adding at most k voters from W is that we add exactly k voters such 
that r loses his or her head-to-head contest with each bi. Assume that U CW is such a set of voters that does 
not correspond to a cover of B. This means that there is some candidate b, such that at least two voters in U 
prefer r to bi. However, if this is the case then bi cannot defeat r in their head-to-head contest and p is not a 
winner U corresponds to a cover This completes the proof of the nonunique-winner constructive case of the 
theorem. 

For the constructive unique-winner case, we modify election E so that score" {p) = t. All other listed 
properties of the relative vote scores and absolute Copeland" scores are unchanged. As in the previous case, 
it is easy to see that p can become the unique winner via adding k voters that correspond to a cover of B. For 
the converse, we will show that we still need to add exactly k voters if p is to become the unique winner 

If we added fewer than k—\ voters then p would not get any extra points and so it would be impossible for 
p to become the unique winner Let us now show that adding exactly k—\ voters cannot make p the unique 
winner. If we added exactly k—\ voters then p would get a points extra from the tie with s. Now consider 
some candidate bi G Sj, where Sj corresponds to one of the added voters, Wj. Since Wj prefers r to bi, adding 
Wj to the election increases the relative performance of r versus bi to A: — 2. Thus adding the remaining k — 2 
voters can result in bi either tieing or losing his or her head-to-head contest with r. In either case p would 
not have a high enough score to become the unique winner. Thus we know that exactly k candidates must 
be added if we want p to become the unique winner and, via the same argument as in the previous case, we 
know that they have to correspond to a cover. 

For the destructive cases it suffices to note that the proof for the constructive nonunique-winner case 
works also as a proof for the destructive unique-winner case (where we are preventing r from being the 
unique winner) and the constructive unique-winner case works also as a proof for the destructive nonunique- 
winner case (where we are preventing r from being a winner). □ 

Let us now turn to the case of control via deleting voters. Unfortunately, the proofs here are not as 
uniform as before and we need in some cases to handle a = 1 separately from the case where < a < L 
Also, we cannot use the construction lemma (Lemma [4.8b anymore to so conveniently build our elections. In 
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the case of deleting voters (or partitioning voters) we need to have a very clear understanding of how each 
voter affects the election and the whole point of introducing the construction lemma was to abstract away 
from such low-level details. 

Analogously to the case of candidate control, we will later reuse the resistance proofs for deleting voters 
within the resistance proofs for partitioning voters. 

Theorem 4.23 Copeland' is resistant to constructive control via deleting voters (CCDV) in the nonunique- 
winner model and to destructive control via deleting voters ( DCDV) in the unique-winner model, for both the 
rational and the irrational voter model. 

Proof. Let {B,y) be an instance of X3C, where B — {b\^ . . . ,^73a} and = {S\^ ... jS',,} is a finite family 
of three-element subsets of B. Without loss of generality, we assume that n>k and that k>2 {if yi <k then 
,5^ does not contain a cover of B, and if ^ < 2 then we can solve the problem by brute force). We build an 
election £ = (C,y) such that the preferred candidate p can become a Copeland' winner of E by deleting at 
most k voters if and only if ,5^ contains a A:-element cover of B. 

We let the candidate set C be {p,r,bi,..., bo,i^} and we let V be the following collection of4n — k voters: 

1 . We have « — 1 voters with preference B > p > r, 

2. we have n — k+l voters with preference p > r > B, and 

3. for each 5, G we have two voters, v, and vj, such that 

(a) V, has preference r > B — Si > p > Si, and 

(b) v'l has preference r>Si>p>B — Si. 

It is easy to see that for all bi G B, vsE{r,bi) ^ 2n — k + 2, vsE{bi,p) =k~2, and vsE{r,p) ~ k. 

If contains a ^-element cover of B, say {Sai jSa^}, then we delete voters Va, , . . . , Va^. In the resulting 
election, p ties every other candidate in their head-to-head contests, and thus p is a winner. 

For the converse, suppose that there is a subset W of at most k voters such that /? is a winner of E = 
(C,y — W). It is easy to see that scoreg{r) =3^+1. Since /? is a winner of E, p must tie-or-defeat every 
other candidate in their head-to-head contests. By deleting at most k voters, p can at best tie r in their head- 
to-head contest. And p will tie r only if = k and every voter in W prefers r to p. It follows that W is a 
size k subset of {vi, Vj, . . . , v„, vj,}. 

Let bi G B. Recall that \SE{bi,p) ~ k — 2 and that p needs to at least tie bi in their head-to-head contest in 
E. Since ||W|| = k, it follows that W can contain at most one voter that prefers p to bi. Since k>2,it follows 
that W contains only voters from the set {vi , . . . , v„} and that the voters in W correspond to a A:-element cover 
ofB. 

This completes the proof for the nonunique-winner constructive case. This proof also handles the unique- 
winner destructive case, since r is always a winner after deleting at most k voters from E and /?, is never a 
winner after deleting at most k voters from E. And so r can be made to not uniquely win by deleting at most 
k voters if and only if p can be made a winner by deleting at most k voters. □ 

Theorem 4.24 Let a be a rational number such that < a < 1- Copeland" is resistant to constructive 
control via deleting voters ( CCDV) in the unique-winner model and to destructive control via deleting voters 
(DCDV) in the nonunique-winner model, for both the rational and the irrational voter model. 

Proof. As in the proof of the previous theorem, let {B,,y) be an instance of X3C, where B ~ {bi, . . . , bT,i^} 
and 5^ — {S\ , . . . is a finite family of three-element subsets of B. Without loss of generaUty, we assume 
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that n> k and that k > 2 (if n < k then does not contain a cover of B, and if k <2 then we can solve the 
problem by brute force). We build an election E = (C, V) such that: 

1 . If ,y contains a A:-element cover of B, then the preferred candidate p can become the unique Copeland" 
winner of E by deleting at most k voters, and 

2. if r can become a nonwinnerby deleting at most k voters, then ^ contains a A:-element cover of B. 

We use the election from the proof of Theorem l4.23l with one extra voter with preference p > r > B. That 
is, we let the candidate set Cbe {/?, r,^i, . . . jb^k} and we let V be the following collection of 4« — A:+ 1 voters: 

1 . We have « — 1 voters with preference B > p > r, 

2. we have n — k + 2 voters with preference p > r > B, and 

3. for each Si G ^ we have two voters, v, and v'-, such that 

(a) V, has preference r > B — Si> p > Si, and 

(b) v'j has preference r > Si > p > B — Si. 

It is easy to see that for all bi S B, vs£(r,^,) ~ 2n — k + 3, \SE{bi,p) =k — 3, and \SE{f,p) = k—1. 

If ^ contains a fc-element cover of B, say {Sm S'nj. }, then we delete voters v^j , . . . , . In the resulting 
election, p defeats every other candidate in their head-to-head contests, and thus p is the unique winner. 

To prove the second statement, suppose that there is a subset W of at most k voters such that r is not a 
winner of £ = {C,V ~W). Since vs£(r,/7,) =2n—k + 3 and n>k, it is immediate that r defeats every bi G B 
in their head-to-head contests in E. In order for r not to be a winner of E, p must certainly defeat r and 
tie-or-defeat every bi G B in their head-to-head contests. But p can defeat r in their head-to-head contest only 
if II W II = k and every voter in W prefers r to p. It follows that W is a size-A: subset of {vj , Vj , . . . , v„, v',}. 

Let bi G B. Recall that \SE{bi,p) = k — 3 and that p needs to at least tie bi in their head-to-head contest in 
E. Since ||W|| = k, it follows that W can contain at most one voter that prefers p to Since A: > 2, it follows 
that W contains only voters from the set {vj , . . . , v„} and that the voters in W correspond to a fc-element cover 

ofB. a 

Theorem 4.25 Let a be a rational number such that < a < 1. Copeland" is resistant to constructive 
control via deleting voters ( CCDV) in the nonunique-winner model and to destructive control via deleting 
voters ( DCDV) in the unique-winner model, for both the rational and the irrational voter model. 

Proof. Let {B,5^) be an instance of X3C, where B = {b\, . . . ,^J3a} and ~ {Sy, . . . ,S„} isa. finite family 
of three-element subsets of B. Without loss of generality, we assume that n>k and that k > 2 {if n < k then 
does not contain a cover of B, and if A: < 2 then we can solve the problem by brute force). We build an 
election E = {C,V) such that: 

1. \f ,5^ contains a A:-element cover of B, then the preferred candidate p can become a Copeland" winner 
of E by deleting at most k voters, and 

2. if r can be made to not uniquely win the election by deleting at most k voters, then ,5^ contains a 
^-element cover of B. 

Our election is similar to the elections from the proofs of Theorems 14.231 and 14.241 To avoid problems 
when a = 0, we introduce a new candidate f to ensure that p and r are the only possible winners after 
deleting at most k candidates. We let the candidate set C be {p,r,r,bi, . . . , b^,/;} and we let V be the following 
collection of 4« — + 2 voters: 

1 . We have n — 2 voters with preference B > p > r > r. 
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2. we have n — k + 2 voters with preference p > r > f > B, 

3. for each 5; G ,y, we have two voters, v; and vj, such that 

(a) V, has preference r > r > B — Sj > p > Sj, and 

(b) v'l has preference r > r > Si > p > B — Sj, 

4. we have one voter with preference r > p > r > B, and 

5. we have one voter with preference B > p > r > r. 

It is easy to see that for all bi G B, vs£(r,Z7,) = vs£(r,Z7,) = 2« — ^+4, vs£(r, r) = 4« — ^ + 2, vsE{bi,p) — 
vsE{r,p) = k, and vsE{r,p) ^k~2. 

If =5^ contains a ^-element cover of B, say {Sa^ , • • • I'S'aj.}, then we delete voters , . . . , Va^.. In the resulting 
election, p ties r in their head-to-head contest and p defeats every other candidate in their head-to-head 
contests. It follows that p is a winner 

To prove the second statement, suppose that there is a subset W of at most k voters such that r is not a 
unique winner of E ~ {C,V ~ W). It is easy to see that r defeats every candidate in {r,bi,.. . ,bT,ii} in their 
head-to-head contests in E. So it certainly cannot be the case that r defeats p in their head-to-head contest in 
E. It follows that ||W|| ^ k and that every voter in W prefers r to p. Note that both r and p defeat r in their 
head-to-head contest in E and that both r and r defeat every bi G B in their head-to-head contests in £. It 
follows that the only possible winners in E are r and p. (Note that without r, it would be possible that after 
deleting k voters, some bi defeats all candidates other than r in their head-to-head contests. If a = 0, this 
could prevent r from being the unique winner without necessarily making p a winner.) 

Let bi G B. Recall that vsE{bi,p) = k — 4- and that p needs to defeat bi in their head-to-head contest in E. 
Since = k, it follows that W can contain at most one voter that prefers p to bi. Since k > 2 and every 
voter in W prefers r to p, it follows that W contains only voters from the set {vi, . . . , v„} and that the voters 
in W correspond to a ^-element cover of B. □ 

Theorem 4.26 Let a be a rational number such that < a < 1. Copeland" is resistant to both construc- 
tive and destructive control via partitioning voters in the TP model (CCPV-TP and DCPV-TP), in both the 
nonunique-winner model and the unique-winner model, for both the rational and the irrational voter model. 

Proof. Let (B,^) be an instance of X3C, where B ^ {bi, . . . ,bj,k} and ^ = {^i, ... jS',,} is a finite family 
of three-element subsets of B. Without loss of generality, we assume that n >k and that k > 2 (if n < k then 
S does not contain a cover of B, and if k <2 then we can solve the problem by brute force). We build an 
election E = {C,V) such that: 

1. If 5^ contains a A:-element cover of B, then the preferred candidate p can become the unique Copeland" 
winner of E via partitioning voters in the TP model, and 

2. if r can be made to not uniquely win E via partitioning voters in the TP model, then ,y contains a 
^-element cover of B. 

Note that this implies that Copeland" is resistant to both constructive and destructive control via partitioning 
voters in the TP model, in both the nonunique-winner model and the unique-winner model. 

Our construction is an extension of the construction from Theorem 14.241 We let the candidate set C be 
{p,r,s,b\,. . . ,bT,k] and we let V be the following collection of voters: 

1 . We have ^ + 1 voters with preference s > r > B > p. 
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2. we have « — 1 voters with preference B > p > r > s, 

3. we have n —k + 2 voters with preference p > r > B > s, and 

4. for each Si G ^ we have two voters, v,- and v^, such that 

(a) V, has preference r > B — Si > p > Si > s, and 

(b) has preference r > Si > p > B — Si > s. 

Let y C y be the collection of all the voters in V except for the k+l voters with preference s > r > B > p. 
Note that V is exactly the voter collection used in the proof of Theorem 14.241 with candidate s added as the 
least desirable candidate. Since s does not influence the differences between the scores of the other candidates, 
the following claim follows immediately from the proof of Theorem l4.24l 

Claim 4.27 If r can become a nonwinner of[C,V) by deleting at most k voters, then ,5^ contains a k-element 
cover ofB. 

Recall that we need to prove that if contains a ^-element cover of B, then p can be made the unique 
Copeland" winner of E via partitioning voters in the TP model, and that if r can be made to not uniquely win 
E via partitioning voters in the TP model, then .y contains a ^-element cover of B. 

If contains a A;-element cover of B, say {Sa, , . . . ,Sa^}, then we let the second subelection consist of the 
^ + 1 voters with preference s > r > B > p and voters Va,, . . . , v„j. . Then p is the unique winner of the first 
subelection, s is the unique winner of the second subelection, and p uniquely wins the final run-off between 
p and s. 

To prove the second statement, suppose there is a partition of voters such that r is not a unique winner 
of the resulting election in model TP. Note that in at least one of the subelections, without loss of generality 
say the second subelection, a majority of the voters prefers r to all candidates in {p,bi, . . . jbjk}- Since r 
is the unique winner of every run-off he or she participates in, r cannot be a winner of either subelection. 
Since r defeats every candidate in {p,bi,. . . , ^3^,} in their head-to-head contests in the second subelection, in 
order for r not to be a winner of the second subelection, it must certainly be the case that s defeats r in their 
head-to-head contest in the second subelection. This implies that at most k voters from V can be part of the 
second subelection. 

Now consider the first subelection. Note that r cannot be a winner of the first subelection. Then, clearly, r 
cannot be a winner of the first subelection restricted to voters in V. By Claim l4!27] it follows that ^ contains 
a A:-element cover of B. □ 

Theorem 4.28 Let a be a rational number such that < a < 1. Copeland" is resistant to constructive 
control via partitioning voters in the TE model ( CCPV-TE), in both the nonunique-winner model and the 
unique-winner model, for both the rational and the irrational voter model. 

Proof. We use the exact same construction as in the proof of Theorem 14.261 We will show that if ,5^ 
contains a A:-element cover of B then p can be made the unique Copeland" winner of E via partitioning voters 
in the TE model, and that if p can be made a winner by partitioning voters in the TE model then ,y contains 
a A;-element cover of B. 

If contains a A;-element cover of B, say {S'a, , . . . , S'a^ }, then we let the second subelection consist of the 
^ + 1 voters with preference s > r > B > p and voters v^j , . . . , Va^ ■ Then p is the unique winner of the first 
subelection, s is the unique winner of the second subelection, and p uniquely wins the final run-off between 
p and s. 
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To prove the second statement, suppose there is a partition of voters such that p is a Copeland" winner of 
the resuhing election in model TE. Note that in at least one of the subelections, without loss of generality say 
the second subelection, a majority of the voters prefers r to all candidates in {p,bi,. . . ,^J3jt}. Since r is the 
unique winner of every run-off he or she participates in, r can certainly not be the unique winner of the second 
subelection. Since r defeats every candidate in {p,bi,. . . ,^73^} in their head-to-head contests in the second 
subelection, and since s does not influence the relative vote scores of the candidates in {p,r,bi,. . . ,^3^}, no 
candidate in {p,bi,... , /73jt} is a winner of the second subelection. It follows that i is a winner of the second 
subelection. If s were to tie r in their head-to-head contest in the second subelection, then s would tie all 
candidates in their head-to-head contests in the second subelection, and r would be the unique winner of 
the second subelection (since a < 1). It follows that s defeats r in their head-to-head contest in the second 
subelection. This implies that at most k voters from V can be part of the second subelection. 

Now consider the first subelection. Note that p must be the unique winner of the first subelection. So, 
certainly, r cannot be a winner of the first subelection. Then, clearly, r cannot be a winner of the first 
subelection restricted to voters in V. By Claim l4!27l it follows that .y contains a ^-element cover of B. □ 

Theorem 4.29 Copeland' is resistant to constructive control via partitioning voters in the TE model ( CCPV- 
TE), in both the nonunique-winner model and the unique-winner model, for both the rational and the irra- 
tional voter model. 

Proof. We use the same construction as in the proof of Theorem l4.261 except that we have one fewer voter 
with preference s > r > B > p. We will show that if .y contains a ^-element cover of B then p can be made 
the unique Copeland^ winner of E via partitioning voters in the TE model, and that if p can be made a winner 
by partitioning voters in the TE model then y contains a A:-element cover of B. 

If y contains a A:-element cover of B, say {Sen, ■ ■ ■ ''^a*}' '^hen we let the second subelection consist of 
the k voters with preference s > r > B > p and voters , . . . , v^j. Then p is the unique winner of the first 
subelection and proceeds to the run-off, and r and s are winners of the second subelection, and so no candidate 
from the second election proceeds to the run-off. It follows that p is the only candidate participating in the 
final run-off, and so p is the unique winner of the election. 

To prove the second statement, suppose there is a partition of voters such that p is a Copeland' winner 
of the resulting election in model TE. Note that in at least one of the subelections, without loss of generality 
say the second subelection, a majority of the voters prefers r to all candidates in {p,bi,. . . ,^J3i}. Since r is 
the unique winner of every run-off he or she participates in, r should not participate in the final run-off. In 
particular, r cannot be the unique winner of the second subelection. The only way to avoid this is if r does 
not defeat s in their head-to-head contest in the second subelection. This implies that at most k voters from V 
can be part of the second subelection. 

Now consider the first subelection. Note that p must be the unique winner of the first subelection. So, 
certainly, r cannot be a winner of this subelection. Then, clearly, r cannot be a winner of this subelection 
restricted to voters in V. By Claim l4!27] it follows that y contains a fc-element cover of B. □ 

Theorem 4.30 Copeland' is resistant to destructive control via partitioning voters in the TE model (DCPV- 
TE), in both the nonunique-winner model and the unique winner model, for both the rational and the irra- 
tional voter model. 

Proof. We use the same construction as in the proof of Theorem |4.29l except that we have one fewer voter 
with preference p > r > B > s. We will show that if y contains a A:-element cover of B then r can become a 
nonwinner of E via partitioning of voters in the TE model, and that if r can be made to not uniquely win E 
via partitioning of voters in the TE model then y contains a fc-element cover of B. 
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Let V (ZV he the collection of all voters except for the k voters with preference s > r > B > p. Note 
that V is exactly the voter collection used in the proof of Theorem |4. 231 with candidate s added as the least 
desirable candidate. Since s does not influence the differences between the scores of the other candidates, the 
following claim follows immediately from the proof of Theorem l4.23l 

Claim 4.31 If r can be made to not uniquely win (C, V) by deleting at most k voters, then contains a 
k-element cover ofB. 

If 5^ contains a A:-element cover of B, say {Sai ,...,Sa^ }, then we let the second subelection consist of the 
k voters with preference s > r > B > p and voters v„| , . . . , Va^- Then p is a winner of the first subelection, s is 
a winner of the second subelection, and it follows that r does not participate in the run-off. 

For the second statement, suppose there is a partition of voters such that r is not a unique winner of the 
resulting election in model TE. Since r uniquely wins any run-off he or she participates in, it follows that 
r does not uniquely win either subelection. Note that in at least one of the subelections, without loss of 
generality say the second subelection, a majority of the voters prefers r to all candidates in {p,bi, . . . ,^3<:}. 
It follows that r cannot defeat s in their head-to-head contest in the second subelection. This implies that at 
most k voters from V can be part of the second subelection. 

Now consider the first subelection. Note that r cannot be a unique winner of the first subelection. Then, 
clearly, r cannot be a unique winner of the first subelection restricted to voters inV. By Claim l43n it follows 
that ^ contains a ^-element cover of B. □ 



Theorem 4.32 Let a be a rational number such that < a < 1. Copeland" is resistant to destructive 
control via partitioning voters in the TE model (DCPV-TE), in both the nonunique-winner model and the 
unique-winner model, for both the rational and the irrational voter model. 

Proof. Let (B,^) be an instance of X3C, where B ~ {b\, . . . ,/73a} and 5^ = {S'l, ... jS',,} is a finite family 
of three-element subsets of B. Without loss of generality, we assume that n>k and that A; > 2 (if « < ^ then 
S does not contain a cover of B, and if ^ < 2 then we can solve the problem by brute force). We build an 
election E = (C, V) such that: 

1 . If ^ contains a ^-element cover of B, then r can become a nonwinner of E via partitioning voters in 
the TE model, and 

2. if r can be made to not uniquely win E via partitioning voters in the TE model, then contains a 
A;-element cover of B. 

Note that this implies that Copeland" is resistant to destructive control via partitioning voters in the TE model, 
in both the nonunique-winner model and the unique- winner model. 

In the proof of Theorem l4.26l we extended the construction from the proof of Theorem l4.24l In the proof 
of the present theorem, we extend the construction from Theorem l4.25l in the same way. 

We let the candidate set C be r, f,s,b\,..., b^i^} and we let V be the following collection of voters: 

1 . We have k+\ voters with preference s>r>r>B>p, 

2. we have « — 2 voters with preference B>p>r>r>s, 

3. we have n — k + 2 voters with preference p>r>r>B>s, 

4. for each 5,- G S^, we have two voters, y, and vj, such that 

(a) V, has preference r > r > B — Si > p > Si > s, and 
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(b) v'- has preference r > r > Sj > p > B — Si > s, 

5. we have one voter with preference r > p > r > B > s, and 

6. we have one voter with preference B>p>r>r>s. 

Let y C y be the collection of all the voters in V except for the k+l voters with preference s>r>r>B>p. 
Note that V is exactly the voter collection used in the proof of Theorem l4.25l with candidate s added as the 
least desirable candidate. Since s does not influence the differences between the scores of the other candidates, 
the following claim follows immediately from the proof of Theorem l4.25l 

Claim 4.33 If r can be made to not uniquely win (C,y) by deleting at most k voters, then ,5^ contains a 
k-element cover ofB. 

If ^ contains a A;-element cover of B, say {5„| , . . . ,Sa^}, then we let the second subelection consist of 
the ^ + 1 voters with preference s>r>r>B>p and voters , . . . , v„^. Then p is a winner of the first 
subelection, s is the unique winner of the second subelection, and it follows that r does not participate in the 
run-off. 

For the second statement, suppose there is a partition of voters such that r is not a unique winner of the 
resulting election in model TE. Since r uniquely wins any run-off he or she participates in, it follows that 
r does not uniquely win either subelection. Note that in at least one of the subelections, without loss of 
generality say the second subelection, a majority of the voters prefers r to r and both r and r to all candidates 
in {p,bi, . . . ,bik}. If s were to tie r in their head-to-head contest in the second subelection, then s would 
tie all candidates in the second subelection in their head-to-head contests, and r would be the unique winner 
of the second subelection. It follows that s defeats r in their head-to-head contest in the second subelection. 
This implies that at most k voters from V can be part of the second subelection. 

Now consider the first subelection. Note that r cannot be the unique winner of the first subelection. Then, 
clearly, r cannot be the unique winner of the first subelection restricted to voters in V. By Claim [433] it 
follows that ^ contains a ^-element cover of B. □ 

4.3 FPT Algorithm Schemes for Bounded- Case Control 

Resistance to control is generally viewed as a desirable property in system design. However, suppose one is 
trying to solve resistant control problems. Is there any hope? 

In their seminal paper on NP-hard winner-determination problems, Bartholdi, Tovey, and Trick ||BTT89bll 
suggested considering hard election problems for the cases of a bounded number of candidates or a bounded 
number of voters, and they obtained efficient-algorithm results for such cases. Within the study of elec- 
tions, this same approach — seeking efficient fixed-parameter algorithms — ^has, for example, also been used 
(although somewhat tacitly — see the coming discussion in the second paragraph of Footnote [T4b within the 
study of bribery IIFHH06allFHH06bl . To the best of our knowledge, this bounded-case approach to finding 
the limits of resistance results has not been previously used to study control problems. In this section we do 
precisely that. 

In particular, we obtain for resistant-in-general control problems a broad range of efficient algorithms for 
the case when the number of candidates or voters is bounded. Our algorithms are not merely polynomial time. 
Rather, we give algorithms that prove membership in FPT (fixed-parameter tractability, i.e., the problem is not 
merely individually in P for each fixed value of the parameter of interest (voters or candidates), but indeed has 
a single P algorithm having degree that is bounded independently of the value of the fixed number of voters 
or candidates) when the number of candidates is bounded, and also when the number of voters is bounded. 
And we prove that our FPT claims hold even under the succinct input model — in which the voters are input 
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via "(preference-list, binary-integer-giving-frequency-of-that-preference-list)" pairs — and even in the case of 
irrational voters. 

We obtain such algorithms for all the voter-control cases, both for bounded candidates and for bounded 
voters, and for all the candidate-control cases with bounded candidates. On the other hand, we show that for 
the resistant-in-general irrational-voter, candidate-control cases, resistance still holds even if the number of 
voters is limited to being at most two. 

We structure this section as follows. We first start by briefly stating our notions and notations. We next 
state, and then prove, our fixed-parameter tractability results. Regarding those, we first address FPT results 
for the (standard) constructive and destructive cases. We then show that in many cases we can assert FPT 
results that are more general still — in particular, we will look at "extended control": completely pinpointing 
whether under a given type of control we can ensure that at least one of a specified collection of "Copeland 
Outcome Tables" (to be defined later) can be obtained. Finally, we give our resistance results. 



Notions and Notations 

The study of fixed-parameter complexity (see, e.g., IINie06l ) has been expanding explosively since it was 
parented as a field by Downey, Fellows, and others in the late 1980s and the 1990s. Although the area has built 
a rich variety of complexity classes regarding parameterized problems, for the purpose of the current paper 
we need focus only on one very important class, namely, the class FPT. Briefly put, a problem parameterized 
by some value j is said to he fixed-parameter tractable (equivalently, to belong to the class FPT) if there is an 
algorithm for the problem whose running time is f{i)rP'^^\ (Note in particular that there is some particular 
constant for the "big-oh" that holds for all inputs, regardless of what j value the particular input has.) 

In our context, we will consider two parameterizations: bounding the number of candidates and bounding 
the number of voters. We will use the same notations used throughout this paper to describe problems, except 
we will postpend a "-BV/' to a problem name to state that the number of voters may be at most j, and we 
will postpend a "-BC/' to a problem name to state that the number of candidates may be at most j. In each 
case, the bound applies to the full number of such items involved in the problem. For example, in the case 
of control by adding voters, the j must bound the total of the number of voters in the election added together 
with the number of voters in the pool of voters available for adding. 

Typically, we have been viewing input votes as coming in each on a ballot. However, one can also consider 
the case of succinct inputs, in which our algorithm is given the votes as "(preference-list, binary-integer- 
giving-frequency-of-that-preference-list)" pairs. (We mention in passing that for the "adding voter" cases, 
when we speak of succinctness we require that not just the always-voting voters be specified succinctly but 
also that the pool of voters-available-to-be-added be specified succinctly.) Succinct inputs have been studied 
extensively in the case of bribery IIFHH06allFHH06bl . and speaking more broadly, succinctness-of-input 



issues are often very germane to complexity classification (see, e.g., |Wag86|). Note that proving an FPT 

result for the succinct case of a problem immediately implies an FPT result for the same problem (without 

the requirement of succinct inputs being in place), and indeed is a stronger result, since succinctness can 

potentially exponentially compress the input. 

Finally, we would like to be able to concisely express many results in a single statement. To do so, we 

borrow a notational approach from transformational grammar, and use square brackets as an "independent 

r It "I 

She 

He 

He runs; It walks; She walks; and He walks. A special case is the symbol "0" which, when it appears in such 
a bracket, means that when unwound it should be viewed as no text at all. For example, " puccmct j Copeland 
is fun" asserts both "Succinct Copeland is fun" and "Copeland is fun." 



choice" notation. So, for example, the claim 



runs 
walks 



is a shorthand for six assertions: It runs; She runs; 
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Fixed-Parameter Tractability Results 



We immediately state our main results, which show that for all the voter-control cases FPT schemes hold for 
both the bounded-voter and bounded-candidate cases, and for all the candidate-control cases FPT schemes 
hold for the bounded-candidate cases. 

Theorem 4.34 For each rational a, < OC < 1, and each choice from the independent choice brackets below, 
the specified parameterized ( as j varies over N) problem is in FPT; 
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Theorem 4.35 For each rational a, < a < I, and each choice from the independent choice brackets below, 
the specified parameterized (as j varies overN) problem is in FPT; 
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Readers not interested in a discussion of those results and their proofs can at this point safely skip to the 
next labeled section header 

Before proving the above theorems, let us first make a few observations about them. First, for cases where 
under a particular set of choices that same case is known (e.g., due to the results of Sections [4.11 and |4~2] | to 
be in P even for the unbounded case, the above results are uninteresting as they follow from the earlier results 
(such cases do not include any of the "succinct" cases, since those were not treated earlier). However, that is 
a small minority of the cases. Also, for clarity as to what cases are covered, we have included some items that 
are not formally needed. For example, since FPT for the succinct case implies FPT for the no-succinctness- 
restriction case, and since FPT for the irrationality-allowed case implies FPT for the rational-only case, the 
first two choice brackets in each of the theorems could, without decreasing the results' strength, be removed 
by eliminating their "0" and "Copeland"" choices. 

We now turn to the proofs. Since proving every case would be uninterestingly repetitive, we will at times 
(after carefully warning the reader) prove the cases of one or two control types when that is enough to make 
clear how the omitted cases' proofs go. 

Let us start with those cases that can be done simply by appropriately applied brute force. 

We first prove Theorem l4.35l 

Proof of Theorem l435l If we are limited to having at most j candidates, then for each of the cases 
mentioned, the total number of ways of adding/deleting/partitioning candidates is simply a (large) constant. 
For example, there will be at most ("at most" rather than "exactly" since j is merely an upper bound on the 
number of candidates) 2^ possible run-off partitions and there will be at most 2-'^' relevant ways of deleting 
candidates (since we can't (destructive case) or would never (constructive case) delete the distinguished 
candidate). So we can brute-force try all ways of adding/deleting/partitioning candidates, and for each such 
way can see whether we get the desired outcome. This works in polynomial time (with a fixed degree 
independent of j and a) even in the succinct case, and even with irrationality allowed. □ Theorem l4.35l 
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A brute-force approach similarly works for the case of voter control when the number of voters is fixed. 
In particular, we prove the following subcase of Theorem |4.34| 

Lemma 4.36 For each rational a, < a < 1, and each choice from the independent choice brackets below, 
the specified parameterized (as j varies over N) problem is in FPT; 

AV 

RV 

PV-TE ^" 
PV-TP 

When considering "B V/' cases — namely in this proof and in the resistance section starting on page|7T] — 
we will not even discuss succinctness. The reason is that if the number of voters is bounded, say by j, then 
succinctness doesn't asymptotically change the input sizes interestingly, since succinctness at very best would 
compress the vote description by a factor of about j — which in this case is a fixed constant (relative to the 
value of the parameterization, which itself is j). 

Proof of Lemma 14.361 If we are limited to having at most j voters, note that we can, for each of these 
four types of control, brute-force check all possible approaches to that type of control. For example, for the 
case of control by deleting voters, we clearly have no more than 2^ possible vote deletion choices, and for the 
case of control by partitioning of voters, we again have at most 2^ partitions (into Vi and V ~Vi)to consider. 
And 2^ is just a (large) constant. So a direct brute-force check yields a polynomial-time algorithm, and by 
inspection one can see that its run-time's degree is bounded above independently of j. □ Lemma 14.361 
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We now come to the interesting cluster of FPT cases: the voter-control cases when the number of can- 
didates is bounded. Now, at first, one might think that we can handle this, just as the above cases, via a 
brute-force approach. And that is almost correct: One can get polynomial-time algorithms for these cases via 
a brute-force approach. However, for the succinct cases, the degrees of these algorithms will be huge, and 
will not be independent of the bound, j, on the number of candidates. For example, even in the rational case, 
one would from this approach obtain run-times with terms such as That is, one would obtain a family 

of P-time algorithms, but one would not have an FPT algorithm. 

To overcome this obstacle, we will employ Lenstra's IILen83l algorithm for bounded- variable-cardinaUty 
integer programming. Although Lenstra's algorithm is truly amazing in its power, even it will not be enough 
to accomplish our goal. Rather, we will use a scheme that involves a fixed (though very large) number of 
Lenstra-type programs each being focused on a different resolution path regarding the given problem. 

What we need to prove, to complete the proof of Theorem |4.34| is the following lemma. 



Lemma 4.37 For each rational a, Q < (X < I, and each choice from the independent choice brackets below. 



succmct 




Copeland" 
Copeland«^(i„„^^ 



is 


in FPT.- 






AV 




C 




DV 




D 


C 


PV-TE 






PV-TP 



-BC, 



Let us start by recalling that, regarding the first choice bracket, the "succinct" case implies the "0" case, 
so we need only address the succinct case. Recall also that, regarding the second choice bracket, for each 
rational a, < a < 1, the "Copelandj^^jy^j^^j" case implies the "Copeland"" case, so we need only address 
the Copeland" case. 
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So all that remains is to handle each pair of choices from the third and forth choice brackets. To prove 
every case would be very repetitive. So we will simply prove in detail a difficult, relatively representative 
case, and then will for the other cases either mention the type of adjustment needed to obtain their proofs, or 
will simply leave it as a simple but tedious exercise that will be clear, as to how to do, to anyone who reads 
this section. 

So, in particular, let us prove the following result. 

Lemma 4.38 For each rational a, < a < 1, the following parameterized (as j varies over N) problem is 
in FPT.- succinct-Copeland;^^y^j,^,-CCPV-TP-BCj. 

Proof. Let a, < a < 1, be some arbitrary, fixed rational number In particular, suppose that a can be 
expressed as b/d, where b gN, d G b and d share no common integer divisor greater than 1, and if b = Q 
then d ~ I. We won't explicitly invoke b and d in our algorithm, but each time we speak of evaluating a 
certain set of pairwise outcomes "with respect to a," one can think of it as evaluating that with respect to a 
strict pairwise win giving d points, a pairwise tie giving b points, and a strict pairwise loss giving points. 

We need a method of specifying the pairwise outcomes among a set of candidates. To do this, we will 
use the notion of a Copeland outcome table over a set of candidates. This will not actually be a table, but 
rather will be a function (a symmetric one — it will not be affected by the order of its two arguments) that, 
when given a pair of distinct candidates as inputs, will say which of the three possible outcomes allegedly 
happened; Either there is a tie, or one candidate won, or the other candidate won. Note that a COT is simply 
a representation of an election graph (see Section |4.L2| ). So, in a j-candidate election, there are exactly 3(2) 
such functions. (We will not care about the names of the candidates, and so will assume that the tables simply 
use the names 1 through j, and that we match the names of the actual candidates with those integers by 
linking them lexicographically, i.e., the lexicographically first candidate will be associated with the integer 1 
and so on.) Let us call a y-candidates Copeland outcome table a 7-COT. 

We need to build our algorithm that shows that the problem succinct-Copeland j" ,j„j^^|-CCPV-TP-BC,, 
j € N, is in FPT. So, let j be some fixed integer bound on the number of candidates^ 

Let us suppose we are given an input instance. Let / < j be the number of candidates in this instance 
(recall that j is not the number of candidates, but rather is an upper bound on the number of candidates). 

The top level of our algorithm is specified by the pseudocode in Figure [TO] (Although this algorithm 
seemingly is just trying to tell whether the given control is possible for the given case, rather than telling how 
to partition to achieve that control, note that which iteration through the double loop accepts and the precise 
values of the variables inside the integer linear program constraint feasibility problem that made that iteration 
be satisfied will in fact tell us precisely what the partition is that makes the preferred candidate win.) 

'''We will now seem to specify the algorithm merely for this bound. However, it is important to note that we do enough to establish 
that there exists a single algorithm that fulfills the requirements of the definition of FPT. In particular, the specification we are about to 
give is sufficiently uniform that one can simply consider a single algorithm that, on a given input, notes the value of j. the number of 
candidates, and then does what the "/' algorithm we are about to specify does. 

We take this moment to mention in passing that our earlier work, IFHH06al and (this is an expanded, full version of that) rPHH06bl . 
that gives P-time algorithms for the fixed parameter (fixed candidate and fixed voters) cases in fact, in all such claims we have in that 
work, implicitly is giving FPT algorithms, even though those papers don't explicitly note that. The reason is generally the same as why 
that is true in this paper — namely, the Lenstra technique is not just powerful but is also ideally suited for FPT algorithms and for being 
used inside algorithms that are FPT algorithms. Most interestingly, the Lenstra approach tends to work even on succinct inputs, and so 
the FPT comment we made applies even to those results in our abovementioned earlier papers that are about the succinct-inputs case of 
fixed-number-of-candidates and fixed-number-of-voters claims. (The fixed-number-of-candidates and fixed-number-of-voters Dodgson 
winner/score work of Bartholdi, Tovey, and Trick |BTT89b| is known to be about FPT algorithms (see IBGN08I ). Although the paper 
of Baitholdi, Tovey, and Trick [BTT89b l doesn't address the succinct input model, (FHH06a| notes that their approach works fine even 
in the succinct cases of the winner problem. That is true not just for the P-ness of their algorithms even in the succinct case, but also for 
the FPT-ness of their algorithms even in the succinct case.) 
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For each /-COT, Ti, 
For each /-COT, T2, 
Do 

If 

when we have a Copeland"^.^jjjj|^^j election (involving all the input voters), with respect to a, 
between all the candidates who win under Ti with respect to a, and all the candidates who win 
under T2 with respect to a, the preferred candidate of the input problem is a winner, 

then 

create and run the integer linear program constraint feasibility problem that checks whether 
there exists a partition of the voters such that the first subelection has /-COT and the second 
subelection has /-COT T2, and if so, then accept. 

Figure 10; The top-level code for the case succinct-Copelandj^j^jj^^j^^jj-CCPV-TP-BCy. 

Now, note that the total number of /-COTs that exist (we do not need to care whether all can be realized 

via actual votes) is 3(2). So the code inside the two loops executes at most 9(2) times, which is constant- 
bounded since / < j, and we have fixed / 

So all that remains is to give the integer linear program constraint feasibility problem mentioned inside 
the inner loop. The setting here can sometimes be confusing, e.g., when we speak of constants that can 
grow without limit. It is important to keep in mind that in this integer linear program constraint feasibility 
problem, the number of variables and constraints is constant (over all inputs), and the integer linear program 
constraint feasibility problem's "constants" are the only things that change with respect to the input. This is 
the framework that allows us to invoke Lenstra's powerful algorithm. 

We first specify the set of constants of the integer linear program constraint feasibility problem. In partic- 
ular, for each /, 1 < / < 2(2), we will have a constant, that is the number of input voters whose vote is of the 
/th type (among the 2( 2) possible vote possibilities; keep in mind that voters are allowed to be irrational, thus 

the value 2(2) is correct). Note that the number of these constants that we have is itself constant-bounded (for 
fixed j), though of course the values that these constants (of the integer linear program constraint feasibility 
problem) take on can grow without limit. 

In addition, let us define some constants that will not vary with the input but rather are simply a notational 
shorthand that we will use to describe how the integer linear program constraint feasibility problem is defined 
(what constraints occur in it). In particular, for each / and i such that 1 < / < /, 1 < ^ < /, and / ^ d, let vol 1 j ( 
be 1 if Ti asserts that (in their head-to-head contest) / ties or defeats £, and let it be if Ti asserts that (in their 
head-to-head contest) / loses to £. Let valine be identically defined, except with respect to 72. Informally 
put, these values will be used to let our integer linear program constraint feasibility problem seek to enforce 
such a win/loss/tie pattern with respect to the given input vote numbers and the given type of allowed control 
action. 

The integer linear program constraint feasibility problem's variables, which of course are all integer 

variables, are the following 2(2) variables. For each/, 1 </<2('2),we will have a variable, ;7z,, that represents 

how many of the «, voters having the /th among the 2(2) possible vote types go into the first subelection. 

Finally, we must specify the constraints of our integer linear program constraint feasibility problem. We 
will have three groups of constraints. 
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The first constraint group is enforcing that plausible numbers are put in the first partition. In particular, 

for each /, 1 < / < 2(2), we have the constraints < m, and m, < «,. 

The second constraint group is enforcing that after the partitioning we really do have in the first subelec- 
tion a situation in which all the pairwise contests come out exactly as specified by Ti . In particular, for each 
i and i such that 1 < / < /, 1 < ^ < /, and / ^ £, we do the following. Consider the equation 



(4.a) 



( 



Ma) OP 



{a I 1 < fl < 2(2) and in votes of type a it 
holds that i is preferred to £} 



{a I 1 < fl < 2^2 ) and in votes of type a it 
holds that i is preferred to i} 



where a in each sum varies over the 2(2) possible preferences. If vall{i,£) = 1 we will have a constraint of 
the above form with OP set to ">". If vall{£,i) = 1 we will have a constraint of the above form with OP set 
to "<". Note that this means that if va[l{i,£) = vall{£,i) = 1, i.e., those two voters are purported to tie, we 
will add two constraints. 

The third constraint group has the same function as the second constraint group, except it regards the 
second subelection rather than the first subelection. In particular, for each ; and £ such that 1 < / < /, 
I <£ < f, and / 7^ £, we do the following. Consider again equation (14. al l from above, except with each of the 
two occurrences of nia replaced by na — nia- If val2{i,£) = 1 we will have a constraint of that form with OP 
set to ">". If val2{£,i) = 1 we will have a constraint of that form with OP set to "<". As above, this means 
that if val2{i,£) = val2{£,i) = 1, we will add two constraints. 

This completes the specification of the integer linear programming constraint feasibility problem. 

Note that our top-level code, from Figure [10] clearly runs within polynomial time relative to even the 
succinct-case input to the original CCPV-TP problem, and that that polynomial's degree is bounded above 
independently of j. Note in particular that our algorithm constructs at most a large constant (for j fixed) 
number of integer linear programming constraint feasibility problems, and each of those is itself polynomial- 
sized relative to even the succinct-case input to the original CCPV-TP problem, and that polynomial size's 
degree is bounded above independently of j. Further, note that the integer linear programming constraint 
feasibility problems clearly do test what they are supposed to test — most importantly, they test that the sub- 
elections match the pairwise outcomes specified by /-COTs Ti and 72. Finally and crucially, by Lenstra's 
algorithm ( IILen83l . see also IIDow03IINie02l which are very clear regarding the "linear"s later in this sen- 
tence), since this integer linear programming constraint feasibility problem has a fixed number of constraints 
(and in our case in fact also has a fixed number of variables), it can be solved — relative to its size (which 
includes the filled-in constants, such as our «, for example, which are in effect inputs to the integer program's 
specification) — via a linear number of arithmetic operations on linear-sized integers. So, overall, we are in 
polynomial time even relative to succinctly specified input, and the polynomial's degree is bounded above 
independently of j. Thus we have established membership in the class FPT. □ 

We now describe very briefly how the above proof of Lemma 14.381 can be adjusted to handle all the 



partition cases from Lemma 14.371 namely, the cases 
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As noted before, the first two brackets can be ignored, as we have chosen the more demanding choice for 
each. Let us discuss the other variations. Regarding changing from constructive to destructive, in Figure [TOl 
change "is a winner" to "is not a winner." Regarding changing from PV-TP to PV-TE, in the "if" block in 
Figure[TO]change each "all the candidates who win" to "the candidate who wins (if there is a unique candidate 
who wins)." 

Copeland" 
[Copeland«^^j,„„^,J 

these cases are even more straightforward than the partition cases we just covered, so for space reasons we 



The only remaining cases are the cases 
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will not write them out, but rather will briefly comment on these cases. Basically, one's top-level code for 

these cases loops over all /-COTs, and for each (there are 3(2)) checks whether the right outcome happens 
under that /-COT (i.e., the distinguished candidate either is (constructive case) or is not (destructive case) a 
winner), and if so, it runs Lenstra's algorithm on an integer linear programming constraint feasibility problem 
to see whether we can by the allowed action (adding/deleting) get to a state where that particular /-COT 
matches our (after addition or deletion of voters) election. In the integer program, the variables will be the 

obvious ones, namely, for each ;, 1 < / < 2(2), we will have a variable, nii, that describes how many voters of 
type / to add/delete. As our key constants (of the integer linear program constraint feasibility problem), we 

will have, for each /, 1 < / < 2(2), a value, «,, for the number of type / voters in the input. Also, if this is a 

problem about addition of voters, we will have additional constants, «,, 1 < / < 2(2), representing the number 
of type / voters among the pool, W, of voters available for addition. And if our problem has an internal "k" (a 
limit on the number of additions or deletions), we enforce that with the natural constraints, as do we also with 
the natural constraints enforce the obvious relationships between the m,, «,, «,, and so on. Most critically, 
we have constraints ensuring that after the additions/deletions specified by the nij, each pairwise outcome 
specified by the /-COT is realized. 

Finally, although everything in Section 14.31 (both the part so far and the part to come) is written for 
the case of the nonunique-winner model, all the results hold analogously in the unique-winner model, with 
the natural, minor proof modifications. (Also, we mention in passing that due to the connection, found 
in Footnote 5 of ||HHR07aL between unique-winner destructive control and nonunique-winner constructive 
control, one could use some of our nonunique-winner constructive-case results to indirectly prove some of 
the unique-winner destructive-case results.) 

FPT and Extended Control 

In this section, we look at extended control. By that we do not mean changing the ten standard control 
notions of adding/deleting/partitioning candidates/voters. Rather, we mean generalizing past merely looking 
at the constructive (make a distinguished candidate a winner) and the destructive (prevent a distinguished 
candidate from being a winner) cases. In particular, we are interested in control where the goal can be far 
more flexibly specified, for example (though in the partition cases we will be even more flexible than this), 
we will allow as our goal region any (reasonable — there are some time-related conditions) subcollection of 
"Copeland outcome tables" (specifications of who won/lost/tied each head-to-head contest). Since from a 
Copeland outcome table, in concert with the current a, one can read off the Copelandj^^.^jj^j^^j scores of the 
candidates, this allows us a tremendous range of descriptive flexibility in specifying our control goals, e.g., 
we can specify a linear order desired for the candidates with respect to their Copelandj^^^jj^i^^j scores, we can 
specify a linear-order-with-ties desired for the candidates with respect to their Copelandj^^^jj^^^^j scores, we 
can specify the exact desired Copelandj^j^jj^^j^^jj scores for one or more candidates, we can specify that we 
want to ensure that no candidate from a certain subgroup has a Copelandj^^^. . score that ties or defeats the 
CopelandjJ|.^jji^i^^[ score of any candidate from a certain other subgroup, etc [[j Later in this section we will 
give a list repeating some of these examples and adding some new examples. 

'^We mention up front that that initial example list applies with some additional minor technical caveats. Those examples were 
speaking as if in the final election we have all the candidates receiving Copeland°j.^jj^j|^| scores in the final election. But in fact in the 
partition cases this is not (necessarily) so, and so in those cases we will focus on the Copeland outcome tables most natural to the given 
case. For example, in control by partition of voters, we will focus on subcollections of pairs of Copeland outcome tables for the two 
subelections. Also, though our Copeland outcome tables as defined below are not explicitly labeled with candidate names, but rather use 
a lexicographical correspondence with the involved candidates, in some cases we would — though we don't repeat this in the discussion 
below — need to allow the inclusion in the goal specification of the names of the candidates who are in play in a given table or tables, 
most particularly, in the cases of addition and deletion of candidates, and in some partition cases. 
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All the FPT algorithms given in the previous section regard, on their surface, the standard control problem, 
which tests whether a given candidate can be made a winner (constructive case) or can be precluded from 
being a winner (destructive case). We now note that the general approaches used in that section in fact yield 
FPT schemes even for the far more flexible notions of control mentioned above. In fact, one gets, for all 
the FPT cases covered in the previous section, FPT algorithms for the extended-control problem for those 
cases — very loosely put, FPT algorithms that test, for virtually any natural collection of outcome tables (as 
long as that collection itself can be recognized in a way that doesn't take too much running time, i.e., the 
checking time is polynomial and of a degree that is bounded independently of j), whether by the given type 
of control one can reach one of those outcome tables. 

Let us discuss this in a bit more detail. A key concept used inside the proof of Lemma l4.38l was that of a 
Copeland outcome table — a function that for each distinct pair of candidates specifies either a tie or specifies 
who is the (not tied) winner in their pairwise contest. Let us consider the control algorithm given in the proof 
of that lemma, and in particular let us consider the top-level code specified in Figure [TO] That code double- 
loops over size / Copeland outcome tables (a.k.a. /-COTs), regarding the subpartitions, and for each case 
when the outcome tables' subelection cases, followed by the final election that they imply, correspond to the 
desired type of constructive (the distinguished person wins) or destructive (the distinguished person does not 
win) outcome, we check whether those two /-COTs can be made to hold via the current type of control (for 
the case being discussed, PV-TP). 

However, note that simply by easily varying that top-level code we can obtain a natural FPT algorithm 
(a single algorithm, see Footnote [14] the analogue of which applies here) for any question of whether via the 
allowed type of control one can reach any run-time-quick-to-recognize collection of pairs of /-COTs (in the 
subelection), or even whether a given candidate collection and one of a given (run-time-quick-to-recognize) 
/'-COT collection over that candidate collection (/' being the size of that final-round candidate collection) 
can be reached in the final election. This is true not just for the partition cases (where, informally put, 
we would do this by, in Figure [TO] changing the condition inside the "if" to instead look for membership 
in that collection of /-COT© but also for all the cases we attacked via Lenstra's method (though for the 
nonpartition cases we will typically single-loop over Copeland outcome tables that may represent the outcome 
after control is exerted; also, for some of these cases, the caveat at the end of Footnote [15] will apply). And it 
is even easier to notice that for those cases we attacked by direct brute force this also holds. 

So, as just a few examples (some echoing the start of this section, and some new), all the following 
have (with the caveats mentioned above about needed names attached, e.g., in cases of candidate addi- 
tion/deletion/partition, and regarding the partition cases focusing not necessarily directly on the final table) 
FPT extended control algorithms for all the types of control and boundedness cases for which the FPT results 
of the previous section are stated. 

1 . Asking whether under the stated action one can obtain in the final election (simply in the election in 
the case when there is no partitioning) the outcome that all the Copeland{J|.j^jjQ|^g[-system scores of the 

'^Let us discuss this a bit more formally, again using PV-TP as an example. Consider any family of boolean functions Fj, j E N, such 
that each Fj is computable, even when its first argument is succinctly specified, in polynomial time with the polynomial degree bounded 
independently of Now, consider changing Figure [Tol s code to: 

For each /-COT, Ti, 
For each /-COT, Ti, 
If {Fj, {input, TuT2)) 
then ■ • . 

Note that this change gives an FPT control scheme for a certain extended control problem. In particular, it does so for the extended 
control problem whose goal is to ensure that we can realize at least one of the set of {Ti,T2) such that Fj; (/ being the number of 
candidates in the particular input), given as its inputs the problem's input, Ti, and T2 evaluates to true. That is, the Fj functions are 
recognizing (viewed a bit differently, are defining) the goal set of the extended control problem. 

From the input, T[ , and T2 we can easily tell the scores in the final election. So this approach can be used to choose as our extended- 
control goals natural features of the final election. 
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candidates precisely match the relations of the lexicographic names of the candidates. 

2. More generally than that, asking whether under the stated action one can obtain in the final election 
(simply in the election in the case when there is no partitioning) a certain linear-order-without-ties 
regarding the CopelandJ^^jj^^^^j-system scores of the candidates. 

3. More generally still, asking whether under the stated action one can obtain in the final election (simply 
in the election in the case when there is no partitioning) a certain Unear-order-with-ties regarding the 
Copeland{J|.^j;Qj,3[-system scores of the candidates. 

4. Asking whether under the stated action one can obtain in the final election (simply in the election in the 
case when there is no partitioning) the situation that exactly 1492 candidates tie as winner regarding 
their Copelandj^^jj^^i^^j-system scores. 

5. Asking whether under the stated action one can obtain in the final election (simply in the election in the 
case when there is no partitioning) the situation that no two candidates have the same Copelandj^^jj^^j^^- 
system scores as each other 

Again, these are just a very few examples. Our point is that the previous section is flexible enough to address 
not just constructive/destructive control, but also to address far more general control issues. 

Resistance Results 

Theorems 14.341 and 14.351 give FPT schemes for all voter-control cases with bounded voters, for all voter- 
control cases with bounded candidates, and for all candidate-control cases with bounded candidates. This 
might lead one to hope that all the cases admit FPT schemes. However, the remaining type of case, 
the candidate-control cases with bounded voters, does not follow this pattern. In fact, we note that for 
Copelandj^^jjjji^^j all the candidate-control cases that we showed earlier in this paper (i.e., without bounds 
on the number of voters) to be resistant remain resistant even for the case of bounded voters. This resistance 
holds even when the input is not in succinct format, and so it certainly also holds when the input is in succinct 
format. 

The reason for this is that, for the case of irrational voters, with just two voters (with preferences over j 
candidates) any given y-COT can be achieved. To do this, for each distinct pair of candidates / and £, to have 
/ preferred in their pairwise contest have both voters prefer / to £, to have £ preferred in their pairwise contest 
have both voters prefer £ to /, and to have a tie in the pairwise contest have one voter prefer £ to / and one 
voter prefer ; to £. Since in the proofs of resistance for candidate control, we identified elections with their 
election graphs, i.e., with their COTs, it is not hard to see that all these resistance proofs carry over even to 
the case of two irrational voters. 

The only open cases remaining regard the rational- voter, candidate-control, bounded-voter cases. We note 
that Betzler and Uhlmann IIBU08I have recently resolved some of these open issues. 

5 Control in Condorcet Elections 

In this section we show that Condorcet elections are resistant to constructive control via deleting voters 
(CCDV) and via partition of voters (CCPV). These results were originally claimed in the seminal paper of 
Bartholdi, Tovey, and Trick IIBTT92L but the proofs there were based on the assumption that a voter can 
be indifferent between several candidates. Their model of elections did not allow that (and neither does 
ours). Here we show how one can obtain these results in the case when the voters' preference lists are linear 
orders — which is both their model and ours. 
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Recall that a candidate c of election E — (C, V) is a Condorcet winner of E if he or she defeats all other 
candidates in their head-to-head contests. Alternatively, one could say that a candidate c is a Condorcet 
winner of election E if and only if he or she has Copeland" score of ||C|| — 1. Since each election can have 
at most one Condorcet winner, it doesn't make sense here to differentiate between the unique-winner and the 
nonunique-winner models. 

Theorem 5.1 Condorcet elections are resistant to constructive control via deleting voters. 

Proof. This follows immediately from the proof of Theorem l4.24l Note that a Condorcet winner is always 
a unique Copeland" winner, for each rational a with < a < 1, and note that in the proof of Theorem l4.24l 
if y contains a ^-element cover of B, then we can delete k voters such that in the resulting election p 
defeats every other candidate in their head-to-head, contest, i.e., p is a Condorcet winner in the resulting 
election. □ 

Before we proceed with our proof of resistance for the case of constructive control via partition of voters 
(CCPV), we have to mention a slight quirk of Bartholdi, Tovey, and Trick's model of voter partition. If 
one reads their paper carefully, it becomes apparent that they have a quiet assumption that each given set of 
voters can only be partitioned into subelections that each elect exactly one winner, thus severely restricting 
the chair's partitioning possibilities. That was why Hemaspaandra, Hemaspaandra, and Rothe IHHROTall 
replaced Bartholdi, Tovey, and Trick's convention with the more natural ties-promote and ties-eliminate rules 
(see the discussion in IIHHR07al ). but for this current section of our paper we go back to Bartholdi, Tovey, 
and Trick's model, since our goal here is to reprove their results without breaking their model. 

Theorem 5.2 Condorcet elections are resistant to constructive control via partitioning voters ( CCPV) in 
Bartholdi, Tovey, and Trick's model (see the paragraph above). 

Proof. The proof follows via a reduction from the X3C problem. In fact, we use exactly the construction 
from the proof of Theorem l4.26l Let £ = (C, V ) be the election constructed in that proof. 

Since s is the only candidate that p defeats in a head-to-head contest, the only way for p to become a 
winner via partitioning voters is to guarantee that p wins within his or her subelection and that s wins within 
the other one. (Note that since p is not a Condorcet winner, p cannot win in both subelections.) 

If .y contains a A:-element cover, say, {Sai , ■ ■ ■ , Suf. }, then letting Vp = V- {v„j , . . . , v« J and = V - Vp 
will make p the Condorcet winner in this CCPV scenario. 

For the converse, let {Vp,Vs) be a partition of the collection of voters such that p is the global Condorcet 
winner in the CCPV scenario where we use two subelections, one with voters Vp and one with voters Vs. 
Via the above paragraph we can assume, without loss of generality, that p is the Condorcet winner in {C,Vp) 
and that s is the Condorcet winner in (C, Vs). We can assume that Vs contains the A: + 1 voters in V — V (i.e., 
the voters with preference s > r > B > p). Also, Vs contains at most k voters from V, as otherwise s would 
certainly not be a Condorcet winner in {C,Vs). 

As a result, p can be made the Condorcet winner of {C,V) by deleting at most k voters. It follows from 
Claim |4~27] that ,5^ contains a A;-element cover of B. □ 



6 Conclusions 

We have shown that from the computational point of view the election systems of Llull and Copeland (i.e., 
Copeland"'^) are broadly resistant to bribery and procedural control, regardless of whether the voters are 
required to have rational preferences. It is rather charming that Llull's 700-year-old system shows perfect 
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resistance to bribery and more resistances to (constructive) control than any other natural system (even far 
more modern ones) with an easy winner-determination procedure — other than Copeland", < a < 1 — is 
known to possess, and this is even more remarkable when one considers that Llull's system was defined long 
before control of elections was even explicitly studied. Copeland**^ voting matches Llull's perfect resistance 
to bribery and in addition has perfect resistance to (constructive) control. 

A natural open direction would be to study the complexity of control for additional election systems. 
Particularly interesting would be to find existing, natural voting systems that have polynomial-time winner 
determination procedures but that are resistant to all standard types of both constructive and destructive con- 
trol. Also extremely interesting would be to find single results that classify, for broad families of election 
systems, precisely what it is that makes control easy or hard, i.e., to obtain dichotomy meta-results for con- 
trol (see Hemaspaandra and Hemaspaandra IIHH07I for some discussion regarding work of that flavor for 
manipulation). 
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